Beware of Malicious PDF Files

Reuters reports that emails containing malicious PDF files putting computers at risk since Friday. The danger is more pronounced as because PDF attachments are usually not filtered at email gateways.

According to Finnish security software F-Secure, the emails look like credit card statements, with a subject line that says 'Your credit report', 'Personal Financial Statement', 'Balance Report' etc. The infected file has an attachment called report.pdf. When such PDF files are viewed on vulnerable machines, they start downloading software from servers in Malaysia or Sweden, which are now being cleaned.

Adobe claims to have patched the vulnerability in its latest updates to Reader and Acrobat; both tagged as version 8.1.1. Get the latest version from the here.

No comments: