Lazarus hackers are using Log4j to hack US energy companies