Perhaps unsurprisingly, the cyber-crooks are going after the sectors most likely to pay up: healthcare, government, critical infrastructure and small businesses