The primary vector for ransomware is malicious internet links embedded in emails.  It doesn't matter how strong your anti-virus software is and how restrictive your firewalls.  Clicking on those links opens the gates and invites the bad guys in.