By tapping the unusual .scr file type, attackers leverage "executables that don't always receive executable-level controls," ...