Shamoon typically spreads through phishing emails or by exploiting vulnerabilities in networked systems. Once a computer is infected, Shamoon can rapidly propagate throughout an organization's network, causing widespread damage.