Well the victim needs to:
1. Download someone else's rule file. It might look ok, be in someone's well respected repo.
2. Not view the rule file with hex editor and notice the weird unicode chars that are giving bad instructions but don't appear when you view the file normally.
If you've seen Robocop this is like his secret primate directive.
4
1