Tag: amaryllis signal ltd

1 Attack Reports | 0 Vulnerabilities

Attack reports

Reoccurring Use of Highly Suspicious PDF Editors to Infiltrate Environments

Since November 19, 2025, a surge in alerts involving a file named 'ConvertMate' has been observed. Despite its initial harmless appearance, deeper analysis reveals highly suspicious behavior. The file, downloaded from specific domains, initiates external connections, performs host queries, and crea…
scheduled tasks
pdf converter
2025-11-21
malicious vector
suspicious behavior
convertmate
amaryllis signal ltd
pdfeditor
Published: November 21, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports