A fake prompt instructs the victim to copy a supplied command and run it (Win+R / PowerShell / terminal), leading to infection.
Traditional protections (download filters, browser warnings) don't help when the user knowingly runs the command.