By using social engineering tactics, threat actors are able to manipulate their victims into saving and renaming files that will backfire against them.
Source: htdarkreading.com