Malware attacks would not work without the most important ingredient: you Thát is, a gullible version of you, willing to open up an email attachment you don't recognize, or to click and install something from an untrustworthy source. And don't take this as "click-shaming," because even very experienced people have been tricked into installing malware.