Attacks grew more sophisticated and less predictable over the period, according to researchers who scanned more than 20 billion transactions.