Brodie Robertson made a video about malware which pretends to be a pdf but is actually just an executable with a .pdf file extension. So if you double click it, you get pwnd. I think some desktop environments ask you for confirmation before running such thing but I would not count on it.

So we even have an example of Linux specific malware.