Viruses and malware primarily spread through phishing emails, which are designed to deceive recipients into believing they are from a legitimate source. These emails often contain attachments or links that, once clicked, download malicious software onto the recipient's device. Cybercriminals also utilize social engineering tactics to trick individuals into providing sensitive information.