How one man used cyber phishing to nett $100 million and how it is a wakeup call against cybercrime for law firms and others