The main targets for the Dharma RaaS attacks that Sophos analyzed are SMBs, with 85% of attacks seen in 2020 focusing on exposed access tools like Remote Desktop Protocol (RDP).