Worms primarily spread through email attachments and links. When an unsuspecting user opens an infected attachment or clicks on a malicious link, the worm executes and begins to replicate itself. It often uses the victim's email contact list to send itself to other potential victims, thereby spreading rapidly.