As ransomware groups look to expand their attack surface the easiest way to do that is increase the number of people who see their email or to have the ransomware auto-install when the victim opens the email.