A sophisticated spearphishing attack targets construction contractors in Boulder County, Colorado in the latest iteration of a months-long campaign.