Ransomware attackers are zeroing in on mid-market companies