The question asks about a defining characteristic of a worm attack in the context of cyber crime. Let us examine each option by comparing how a worm actually behaves against how a traditional virus behaves.
Since the technical distinction between a worm and a virus turns specifically on whether a host program is needed, and a worm needs none, the correct answer is do not need the host to attach.