The cyber attackers and malware don’t distinguish between their victims because they know even small organisations and startups have few sensitive data to lose.