Phishing is a primary method of initiating ransomware attacks. In a phishing attack, files or links containing malware are sent to users, usually in an email. When the link or attachment is clicked, the ransomware activates. Teaching users how to spot phishing attacks should be a primary objective of organizations.