.lnk (Windows Shortcut) files pointing to PowerShell commands. .exe disguised as document icons (e.g., invoice.pdf.exe ).
Remind staff never to extract and run files from unsolicited archives, especially those containing double extensions. post2.7z
High-risk (often contains obfuscated scripts or executables). post2.7z