They attach by copying themselves to certain files and users spread them by copying infected files and activate them by opening infected files.