A cybercriminal group is preparing for an advanced attack against a financial institution. They create a malicious Microsoft Word document embedded with a zero-day exploit that will execute malware when opened by an unsuspecting employee. The malware is designed to establish a backdoor for remote access once executed. Which phase of the cyber kill chain does this scenario represent?