Hackers posed as aerobics instructors in malware attack on defense contractors