Home / malware

PDF

Trojan:Win32/Pdfphish.BU

First posted on 27 January 2017.
Source: Microsoft

Aliases :

There are no other names known for Trojan:Win32/Pdfphish.BU.

Explanation :

This threat is a .pdf file with a malformed hyperlink to a phishing sites. It usually arrives as attachment to spammed email messages.

The following screenshot shows the .pdf content with malicious link:

When you click the link, you are led to led to either a phishing page where you are tricked into divulging sensitive information, such as email credentials. The phishing site mimics Microsoft Excel Online.





Analysis by Alden Pornasdoro

Last update 27 January 2017

 

TOP