Big companies with numerous endpoints may seem more susceptible. Or, financial services or healthcare industries with valuable data would be easy targets. Bigger firms or those that handle sensitive data have technology, laws, and systems to prevent cyberattacks.
SMBs without IT knowledge, cybersecurity technologies, protocols, or awareness are obvious for hackers to target.