It typically makes its way onto the phone if someone download files accessible from a link sent in a text message.