Small and midsized businesses are attractive targets for cybercriminals because they tend to be less secure and because automation now permits cybercriminals to mass produce attacks for little investment. Criminals can buy malware kits for as little as $40.