If you had seen the dumb things I have seen people click on... ransomware spam is dummy easy to get someone to bite on.

In my honest opinion ransomware problems fall completely at the feet of the MS Exchange admin for whatever company gets merc'd. Need to tighten up that filter game.