Phishing campaigns have shifted. The phishing PDF attachment has become one of the most effective tools in a cybercriminal’s arsenal, quietly replacing .zip files and executables in modern phishing campaigns. This everyday file format is being exploited to steal credentials, deliver malware, and trick users at scale. The IBM X-Force Threat Intelligence Index 2025 highlights a […]
Microsoft has issued a warning about a surge in tax-themed email attacks using PDFs and QR codes to deliver malware. As Tax Day approaches in the United States on April 15, cybercriminals are increasingly targeting individuals and businesses by leveraging tax-related themes to trick users into revealing sensitive information or infecting systems with malicious software. […]
Update, Feb.10, 2025: This story, first published on February 4, has been updated with insights from a security expert who compares the ease of executing these attacks to assembling flat-pack furniture. Furthermore, it includes new Gmail security recommendations from Google to help mitigate these threats. Gmail security has come under threat as cybercriminals employ artificial […]