Festive holidays and business downtime presents a prime opportunity for cybercriminals to strike