Using any kind of storage media to transfer data to a Windows machine is by default a disaster waiting to happen. Windows natively provides the ability for exe

Using any kind of storage media to transfer data to a Windows machine is by default a disaster waiting to happen. Windows natively provides the ability for executables to embed icons (known as resources) for the file manager to render them as. This, combined with the default of hiding file extensions for known types (e.g. .exe), is a recipe for a user eventually executing the malware instead of opening the file or directory they wanted. This malware exploits that very fact by naming itself after the most-recently modified directory on the drive and embedding an icon that ensures that the file manager will render it as a directory. If you ensured by policy that file extensions were never hidden, that resources were not rendered (every exe got the default icon [1]), and that every user received regular training to properly distinguish files from each other (and files from directories), this risk could be somewhat managed. Good luck; I don't even know if you can disable resource rendering. [1] https://i.sstatic.net/vY5dQ.png https://i.sstatic.net/vY5dQ.png