Mother did it, was at the bank the next day getting new account numbers, Worries me

Phishing emails have gotten bad, never ever click on a signin link from any email. I don't care how legit you think it is, only time to do it is if you had just requested a password reset for a site. Just go to the website and sign in, never from the email. Emails claiming to be from paypal, apple, bank...easy to trick folks.

Ransomware can be bad but if you have backups configure, its easy to beat them. Just right click on the folder that had been hijacked (usually file name extensions have been changed by the hacker), go to the previous versions tab and restore the folder to a date before the hijacking. Good to go.