Yes, it’s very much possible to get malware without downloading anything. Other ways malware can infiltrate a device include malicious email attachments, phishing messages, software vulnerabilities, clicking on malicious links, network vulnerabilities, and visiting malicious websites (drive-by infections). This is why it’s vital to have an antivirus like TotalAV for overall protection.