Phishing Attacks Using PDF Files Skyrocket More Than 1K%

---

•  “From 2019-21, we noticed a dramatic 1,160% increase in malicious PDF files – from 411,800 malicious files to 5,224,056
• “PDF files are an enticing phishing vector as they are cross-platform and allow attackers to engage with users, making their schemes more believable as opposed to a text-based email with just a plain link.” 
• The most common form of PDF phishing lures used an image of a fake CAPTCHA to trick victims into clicking the “Continue” button, which led to a malicious site. Another variant used an image that purported to be a coupon, and told victims to click the image in order to get 50% off on a product.
• A third type of PDF phishing attack used images that appeared to be paused videos, but led to a phishing site when users clicked on them.
• “These phishing files do not necessarily carry a specific message, as they are mostly static images with a picture of a play button ingrained in them. “Although we observed several categories of images, a significant portion of them either used nudity or followed specific monetary themes such as Bitcoin, stock charts and the like to lure users into clicking the play button.”  The researchers conclude that users need to pause and think when they receive a suspicious file.    Contact Us to Learn more! 

Why Your Organization is Now at Risk from this Evolving Threat Security professionals have worried about cyberwarfare for decades. But the attack on Sony Pictures, the Solarwinds supply chain compromise, and now the latest Microsoft Exchange zero-day exploits show that nation-state attacks are having a much bigger impact than ever before.
 

Don’t let the big names fool you. Today, any organization is fair game, which means your organization could be next.    Contact Us to Learn more!