Or just has an email client that got infected with a virus. Remember Office macro viruses? How we laughed at how stupid it was that a simple word processor apparently needed vulnerable turing-complete macros?

Now we actually compile source files into documents and get surprised that someone might trick you into running malware.