Fake Adobe Acrobat pages are distributing signed ScreenConnect installers configured for attacker-controlled remote access to ...
Static analysis of a PDF email attachment using pdfid and pdf-parser to identify JavaScript, inspect OpenAction entries, and practice basic SOC investigation techniques. - ...