E-Mail Password Threat

I get many junk emails per day asking for "email confirmation", trying to look like various legit businesses. They're getting pretty good at it, but I can usually hover over the sender's name, and the email client shows the "real" email name which is usually gobbledy gook dot something dot country code. Many end in CN = China, or BR = Brazil, or RU = Russia, PK = Pakistan, so assuming the suffixes are the only real part (big assumption) they come from everywhere. The internet is the developed world's playground.
Never got any ransomware ones. Yet.
Keep your MS system software up to date, and the chances are greatly reduced.