Cybercriminals are increasingly targeting user identities rather than software vulnerabilities to launch ransomware attacks, according to Sophos' latest ...