Even better, those users are probably suffering from alert fatigue already due to all the security warnings about the ancient kvm software, so using a technique

Even better, those users are probably suffering from alert fatigue already due to all the security warnings about the ancient kvm software, so using a technique like this to bypass AV scans would probably be enough to compromise some major systems.