I should give the ransomware gangs more credit. They're quite sophisticated nowadays with HaaS providers selling automation services. But on the outside, it looks pretty simple. Click a link, get pwned.