Phishing is a common and effective method used by cybercriminals to deliver ransomware. To combat this threat, organizations should implement a robust cybersecurity user awareness and training program, conduct regular phishing tests, and enforce strict email filtering protocols. Additionally, deploying Domain-based Message Authentication, Reporting, and Conformance (DMARC) policies can help prevent email spoofing. It's also crucial to disable macro scripts in Microsoft Office files received via email, as these are often used to deliver ransomware. By following these steps, organizations can significantly reduce the risk of falling victim to phishing attacks.