'It's very scary': Small banks quietly hit by ransomware att