Small businesses might think they are little enough to escape cybercrooks' attention, but they're increasingly wrong.