"As of Q4 2018, over 90% of ransomware attacks occured due to RDP exploits, making it the most common attack vector by an order of magnitude. Ransomware attacks typically cause at least 4 days of downtime."
https://www.coveware.com/blog/dont-become-a-ransomware-target-secure-rdp