What are common delivery mechanisms for malware?

Phishing campaigns, exploit kits, watering‑hole sites, and leveraging an existing compromise are all widely observed vectors for delivering malware, as they effectively trick users or exploit vulnerabilities to gain initial footholds.