Malware and ransomware remain a top attack vector. It’s become easy to buy and use.