In reply to Arne.

Thanks for the comment. Certainly not trying to scare, just remind of the importance of protecting the endpoint and definitely the human. more than 80% of data breaches are result of stolen credentials, and the most common way to get those credentials is from phishing.

Also, WRT to malware: here is something from last week(ish) https://www.darkreading.com/vulnerabilities---threats/ransomware-attack-forced-ohio-hospital-system-to-divert-er-patients-/d/d-id/1333333

If you could only see what is happening in the world at large; while you are certainly not clicking on the winning lottery ticket emails; there are plenty of people falling for more crafted attacks every day.