New major malware attack for PDF users

April 29, 2010


Security companies alerted PDF users today of a new malware attack that hopes to exploit users of PDFs by using an unpatched design flaw in the PDF format. Mary Grace Gabriel, a research engineer in CA Inc.'s security group, stated on her blog, "CA ISBU recently received spam emails disguised as a legitimate email from 'your Company System Admin'. The spam mail informs the recipient about a recent change in mailbox servers and requires the user to check the malicious PDF attachment containing the instructions to update mail settings."

She goes on to note that the PDFs actually contain malware and use the PDF /launch function to start the malware attack on Windows PCs who are using the Adobe System's Acrobat application or Adobe Reader. This is also affecting other PDF viewers including Foxit Reader.

Adobe has still not officially responded to this new malware issue, but Brad Arkin head of Adobe security and privacy did not on his blog dated April 13th, that the company is aware of the new issues cited by several security companies and is working to address the security overall for both Adobe Acrobat and Adobe Reader users.

Arkin announced the Adobe Reader Updates also in the blog post and encouraged users to install the update as soon as possible noting, "Most users who ever encountered a security problem using Adobe products were attacked via a known vulnerability that was patched in more recent versions of the software. This is why we've invested so much in the new Adobe Reader Updater that goes into full production with our Tuesday April 13, 2010 release."

Security companies continue to warn PDF users to be suspect of e-mails with PDF attachments that might be rogue and to make sure that users are cautious when opening PDFs.

PDF In-Depth Free Product Trials Ubiquitous PDF

Debenu Quick PDF Library

Get products to market faster with this amazing PDF developer SDK. Over 900 functions and an equally...

Download free demo

Five visions of a PDF Day

In the world of PDFs or as we like to say Planet (of) PDF, a year isn't a real PDF year without an intense few days of industry knowledge sharing.

May 15, 2018
Platinum Sponsor

Search Planet PDF
more searching options...
Planet PDF Newsletter
Most Popular Articles
Featured Product

Debenu PDF Aerialist

The ultimate plug-in for Adobe Acrobat. Advanced splitting, merging, stamping, bookmarking, and link control. Take Acrobat to the next level.


Adding a PDF Stamp Comment

OK, so you want to stamp your document. Maybe you need to give reviewers some advice about the document's status or sensitivity. This tip from author Ted Padova demonstrates how to add stamps with the Stamp Tool along with related comments.