Less common, but possible. An email with a convincing invoice or shipping notice may contain a macro or executable that, when opened, quietly downloads the PUP in the background.
