I'm in a chatroom and some troll is screaming about how he can send a virus to peoples computers from the chatroom itself. Is that even possible?

I’m not looking for advice on whether I should log off asap, I just want to know if that’s even possible without being sent a direct file. Is this dude just BSing? How would you prevent it?