Researchers have observed an increase in phishing as a means to deliver ransomware payloads – and organisations don’t appear to be prepared