ISO is an optical-disc image format that can package files for delivery, not a malware family. In a Kimsuky infection chain, an ISO image masqueraded as a Rapport security-software installer and contained a deceptive Windows shortcut, a hidden batch script, and a legitimate installer. Opening the shortcut executed the batch file, launched benign software as a distraction, and downloaded a malicious macro-enabled document that retrieved a later payload. Its role was therefore an infection container used for social engineering and staged execution on Windows.