Avoid giving out personal information! Malicious actors need to obtain your information from somewhere if they wish to send you a phishing email that secretly harbors ransomware as its payload. Of course, they could get that information from a data breach that’s been published on the dark web. But they could just get it using OSINT techniques by rifling through your social media posts or public profiles for key pieces of information. With that said, it’s important to not overshare online and to generally avoid giving out identifying pieces of personal information unless it’s absolutely necessary.