Engineering giant Arup was the target of an elaborate scam involving a fake video conference call to a member of the finance team in its Hong Kong office