How a weak password is an entry point for ransomware