Check out my book "This is IT" for true IT experiences during my long career: https://tinyurl.com/4uza3zan
Professor Robert McMillen demonstrates how hackers can use LNK files to fool people into install malware from files received through email or a website. They look legitimate until activated.