Having a proper anti-virus and reliable backups are good, but the best defense against threats is being able to identify common vectors of attack.