Social engineering is still the number one attack vector, but ransomware operators are stepping away from encryptors.