Close. You missed the "unless they already have a target" condition specified by the OP. For example,
<a href="http://example.com" target="foo">here</a>
shouldn't change, but it becomes
<a href="http://example.com" target="_target">here</a>

Update: Added example.