Cybersecurity researchers have called attention to a new antivirus evasion technique that involves embedding a malicious Microsoft Word file into a PDF file.
The sneaky method, dubbed MalDoc in PDF by JPCERT/CC, is said to have been employed in an in-the-wild attack in July 2023.
Follow
Details of MalDoc in PDF
While real-world attacks leveraging MalDoc in PDF were observed a little over a month ago, there's evidence to suggest that it was being experimented ("DummymhtmldocmacroDoc.doc") as early as May