Many ransomware campaigns use phishing emails as an entry point and may arrive as part of another malware's payload.