Criminals still like using email to phish credentials but ransomware delivered by email has tapered off.
