Cybercriminals are looking for the best return on their investment paired with the least chance of being caught. Sadly, that appears to mean small businesses are their current target.