Romanian oil company hit by ‘complex cyber-attack’