Inside a real SMB cyberattack — what attackers do at each step and where SohoWizz clients break the chain.