cyber criminals only target large companies true or false