Criminals are increasingly targeting law firms as a means to steal tens of millions from businesses and the wider public.