When vacationers unwind and employees unplug, cybercriminals clock in for their busiest time of year.