As big companies devote more money and personnel to security, criminals are increasingly turning to small businesses that present a softer target.