Iranian state-backed hackers posed as flirty Scouser called Marcy to target workers in defence and aerospace