Scary Spam - or is it??

RussJK

Kingsd316 wrote: »

Just so people know, unless you have the full Adobe package (which costs hundreds) you cannot get a virus from a PDF, only the full version lets you run embeded images and programmes, if it is opened with just adobe reader it will be fine.

This is untrue. Please delete this in case anyone reads it, as your advice is quite unsafe.

Adobe Acrobat has more avenues for exploits than Adobe Reader (e.g. Peachy), but obviously you've never heard of zbot for instance which affects both Acrobat and Adobe Reader.

It may actually be worth setting a PDF reader to only run in sandbox, though I'm going to have to find out how that will affect the in-browser plug-in as we both read a lot of journals.

FLA27

Thanks for posting Hippiechickgirl, I have this in my Spam box on my blueyonder address at the moment. I've chosen to ignore and had forgotten about it until I read this. I didn't open it and I am glad I didn't now I've read everyones comments.

prowla

Anyway, the idea is that you click on the link to find out what the heck it is that you have bought, and that is a link to a bit of malware, not the thing it purports to be (it might be really clever and do the malware bit and then bring up the document to rick ou into thinkig that it just took a while to load).

I had one from an "ebay customer" a while back, demanding to know where the item they had paid for was. (Which I deleted.)

spannerzone

Kingsd316 wrote: »

Just so people know, unless you have the full Adobe package (which costs hundreds) you cannot get a virus from a PDF, only the full version lets you run embeded images and programmes, if it is opened with just adobe reader it will be fine.

NB not that im saying open it im just statiing that if it was opened by mistake with adobe reader, which is what most people have you wouldnt get a virus if that was the aim of the PDF in the first place

Ummmm, no! :shocked:

Adobe release patches almost as often as Microsoft for the vulnerabilities, it's got to be one of the worst software offenders.

Acrobat vulnerabilities

Kingsd316

Appoligies people, i was obviously wrong,

debitcardmayhem

Just a thought, but of course is foxit reader susceptible to pdf exploits , anyone know ??

jayme1

debitcardmayhem wrote: »

Just a thought, but of course is foxit reader susceptible to pdf exploits , anyone know ??

yes and no, the easist way to think about it is the mac vs windows malware situation, both are riddled with holes ready to be exploited but because windows (adobe reader) market share is so great pretty much every attack will go after adobe reader, over the less popular foxit reader.

but saying that I would not rule out the possibility of a combined exploit that could affect both foxit and adobe reader because I don't know how much code is shared between the programs (if any), or even if an actual exploit could be fully housed in a pdf file that could infect the system regardless on how it's opened.

for an example: if you take the zero day adobe reader exploit from last september that I mentioned above, the foxit reader was not vulnerable at all, but foxit reader has had and has been openly exploited in the wild in the past, though if you read that link you will find it could only affect old non patched versions of foxit (much like a lot of malware attacks use old exploits, remember the exploit the conficker worm was using was patched by microsoft a month before the virus was released into the wild)

debitcardmayhem

Thanks Jayme1

almillar

The key, non-technical question is, of course, did you order anything from puremobile - if you did not, ignore the email.
Similar to Halifax, DHL, replace the brand names with other banks, asking you for security details or telling you they have a delivery for you. More likely to be believed if you actually bank with Halifax or are actually expecting a delivery, but you still have to be careful!

free4440273

it's a setup /