Tag: pdf converter

2 Attack Reports | 0 Vulnerabilities

Attack reports

Reoccurring Use of Highly Suspicious PDF Editors to Infiltrate Environments

Since November 19, 2025, a surge in alerts involving a file named 'ConvertMate' has been observed. Despite its initial harmless appearance, deeper analysis reveals highly suspicious behavior. The file, downloaded from specific domains, initiates external connections, performs host queries, and crea…
scheduled tasks
pdf converter
2025-11-21
malicious vector
suspicious behavior
convertmate
amaryllis signal ltd
pdfeditor
Published: November 21, 2025
Downloadable IOCs: 0

Byte Bandits: How Fake PDF Converters Are Stealing More Than Just Your Documents

A sophisticated malware campaign exploits users' trust in online file conversion tools by impersonating the legitimate service pdfcandy.com. The attack involves fake PDF-to-DOCX converters that trick victims into executing a malicious PowerShell command, leading to the installation of Arechclient2,…
phishing
social engineering
credential theft
information stealer
sectoprat
2025-04-15
pdf converter
arechclient2
Published: April 15, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports