In the 2017 data breach report, Verizon shared an interesting perspective on the infection vectors used by threat actors with malware. This showed that 81% of all malware infections happened through a cyber attack where the malware was remotely installed or injected. The following diagram illustrates the Verizon study:
Malware infection vectors
Injected by remote attacker
Threat actors leverages vulnerabilities that allow them to execute remote commands through software.
Phishing and spear phishing techniques are very old forms of computer-based social engineering...