

Oh damn, so just viewing a file in your file manager is enough to get infected in an insecure desktop environment, as thumbnails can be generated programmatically? If I clicked a bad link that would 100% infect my system.
I’m not worried too much about screen-capture. I’m worried first and foremost about triggering any arbitrary code execution and thumbnail generation on a file would definitely do it.
So basically they still require arbitrary code execution as a starting point.
Another guy shared this link from Secureblue that goes into thumbnail generation, which can be done programmatically and has been documented in the past as an avenue for infection in Nautilus.