I am not sure of that one, in that most ransomware is delivered via a link to a web site, requiring a browser and usually some form of Java or ActivX (pick your poison). I would assume Linux must have such installed as well to render websites? Movies? Video? Then there's flash as well. But overall, everything I have seen suggests it is a social engineering thing 90% or more of the time. Invite someone, use a fake email (such as "Your Amazon order was cancelled" (if you do not have an Amazon account, clicking on that one is the lowest of "dumb", but people do it). So, yes probably some help, but the crypto program encodes your whole hardrive, so if it gets going, I would say it is pretty omnivorous as to what it eats.