North Korean hackers expand social engineering operation to IT firms: Report