The "viral" nature of this threat relies on social engineering and trust arbitrage. Here is the typical infection chain:
If you encounter a software installer, watch for these red flags: installer viral