> and require the victim to click it  they commonly do. a lot of ics malware expects the user to click a .lnk or exe. obviously lower success rate but don't underestimate how many users will click on whatever pops up in front of their face. many will in a 10k sample. the real shocker is the sigged .exe. the new hotness is a remotely hosted payload delivered with a .url file.
United States