Even if a file has a .mkv extension, it can embed malicious scripts if your media player has unpatched security holes.