What’s described is trojan horse malware, not a virus.
The word “virus” has morphed and almost all “viruses” on the PC side now are malware. And guess how many PCs are infected by someone clicking on something they shouldn’t have? Probably close to 90% of infections of malware.
So keep being semantically difficult, but the most clicky users of the PC are now clicky users on the Mac because they have been told that Macs can’t get “viruses”.
But they sure can get “trojan horse malware”, can’t they?