Critical infrastructure software maker confirms ransomware attack