Sitting duck for cyber criminals