Iranian agents used social engineering tricks such as fake MRI test results to lure victims in, the NCSC said