Malicious PDFs are rampant
June 16th, 2009
Every day we see new malicious PDFs. They look very innocent, such as this readme.pdf
Checking the file properties shows you how legit it really is…
If you open the PDF in a text editor, such as notepad, you can see the code that exploits Adobe Acrobat Reader, using a JavaScript function.
Interestingly, malicious PDF files are not well detected at all. We are currently working on a new engine to detect malicious documents and hopefully we can get it out quickly and start catching those nasties.
Jerome Segura
Comments:
|
|
