Cybercriminals appear to be successfully hitting small and large firms alike.