One of my remote users got hit by Cryptowall a few weeks ago. And the email he got was so obvious, I couldn't believe he fell for it. And he didn't run backups, so he lost all files. I'd rather have users learn the lesson the hard way, than to bend over and support some scumbags.