In the scenario where an attacker sends spam emails with a .PPSX attachment and malware executes upon mouse hovering, what technique is used to distribute malware?

The technique used to distribute malware in the described scenario is mouse hovering. In this context, the malware is triggered not by an actual click on the attachment but rather by merely moving the mouse pointer over the .PPSX file. This is significant because it demonstrates a unique method of malware execution that exploits user interactions that are often overlooked.

Mouse hovering techniques can be particularly effective because they can deceive users into engaging with malicious content unwittingly. This method relies on social engineering tactics, luring users into a false sense of security while still leading to malicious outcomes through their interactions with the file.

While phishing involves tricking users into revealing sensitive information or downloading malicious content through deceptive emails, the key aspect of this question focuses on the specific action of triggering malware from a mere hover event. Worm propagation typically refers to malware that spreads automatically across networks without user interaction, while Trojan delivery usually involves disguising malware as a legitimate file that requires the user to execute it. Hence, in this case, mouse hovering is the specific action that initiates the execution of the malware, making it the correct answer.