Ransomware typically spreads through phishing emails, malicious websites, or infected software downloads. The most common delivery method is through a phishing email that appears to come from a trusted source and includes a malicious attachment or a link to a website that downloads the malware. Once the malware is installed, it can spread within a network by exploiting vulnerabilities in unpatched systems. Sometimes, it can also spread through drive-by downloads, where a user unwittingly downloads the malware by visiting a compromised website.