Infection typically occurs when email lists are compromised, and malicious actors send harmful content to the recipients. This can happen through various means such as hacked email accounts, unsecure email servers, or even through seemingly legitimate campaigns that have been infiltrated by malicious code.