Historically, malicious actors used double extensions to deceive users into downloading malware. By default, operating systems like Windows often hide the final, true extension. A file named Video.avi.exe might look like a video to an untrained eye but executes a virus when clicked.