Adobe ships critical PDF Reader, Acrobat patch

Tuesday, June 24th, 2008

Adobe has shipped a critical update to patch a code execution vulnerability affecting multiple versions of its Reader and Acrobat products. According to Adobe’s advisory, the flaw “could potentially allow an attacker to take control of the affected system.” If you have Adobe Reader or Acrobat installed on your machine, this update ...

Targeted attacks using malicious PDF files

Thursday, April 24th, 2008

Dating back to the end of February, we have been tracking test runs of malicious PDF messages to very specific targets. These PDF files exploit the recent vulnerability CVE-2008-0655. Ever since the end of March, beginning of April, the amount of samples seen in the wild has significantly increased. Interestingly enough, ...

Whale Phishing

Friday, April 18th, 2008

One of the things I love about cutting-edge technology is the way we get to invent fun, new terminology. It seems to have been around before, but I just came across my first reference to "whale phishing." It describes a phish where the target is a very important person, such ...