How does a ransom ware get activated? Did it always require a user to open a file like an executable (or a word document in unsafe mode) or are they sophisticat

How does a ransom ware get activated? Did it always require a user to open a file like an executable (or a word document in unsafe mode) or are they sophisticated enough that simply downloading it will make sure it exploits some vulnerability in the browser or the OS?