Someone asked me for help with this phishing PDF. Taking a look with pdfid.py: Nothing to see here, except Stream Objects (/ObjStm). When stream objects are detected, it’s best to generate statistics (-a) with pdf-parser.py while parsing stream objects too (-O), like this: And here we see that this PDF contains URLs (/URI). Thus we …
Read more “Phishing PDF With Incremental Updates., (Sat, Mar 14th)”
Someone asked me for help with this phishing PDF. Taking a look with pdfid.py: Nothing to see here, except Stream Objects (/ObjStm). When stream objects are detected, it’s best to generate statistics (-a) with pdf-parser.py while parsing stream objects too (-O), like this: And here we see that this PDF contains URLs (/URI). Thus we …
Read more “Phishing PDF With Incremental Updates., (Sat, Mar 14th)”
Someone asked me for help with this phishing PDF. Taking a look with pdfid.py: Nothing to see here, except Stream Objects (/ObjStm). When stream objects are detected, it’s best to generate statistics (-a) with pdf-parser.py while parsing stream objects too (-O), like this: And here we see that this PDF contains URLs (/URI). Thus we …
Read more “Phishing PDF With Incremental Updates., (Sat, Mar 14th)”
Someone asked me for help with this phishing PDF. Taking a look with pdfid.py: Nothing to see here, except Stream Objects (/ObjStm). When stream objects are detected, it’s best to generate statistics (-a) with pdf-parser.py while parsing stream objects too (-O), like this: And here we see that this PDF contains URLs (/URI). Thus we …
Read more “Phishing PDF With Incremental Updates., (Sat, Mar 14th)”
Someone asked me for help with this phishing PDF. Taking a look with pdfid.py: Nothing to see here, except Stream Objects (/ObjStm). When stream objects are detected, it’s best to generate statistics (-a) with pdf-parser.py while parsing stream objects too (-O), like this: And here we see that this PDF contains URLs (/URI). Thus we …
Read more “Phishing PDF With Incremental Updates., (Sat, Mar 14th)”
Someone asked me for help with this phishing PDF. Taking a look with pdfid.py: Nothing to see here, except Stream Objects (/ObjStm). When stream objects are detected, it’s best to generate statistics (-a) with pdf-parser.py while parsing stream objects too (-O), like this: And here we see that this PDF contains URLs (/URI). Thus we …
Read more “Phishing PDF With Incremental Updates., (Sat, Mar 14th)”
Someone asked me for help with this phishing PDF. Taking a look with pdfid.py: Nothing to see here, except Stream Objects (/ObjStm). When stream objects are detected, it’s best to generate statistics (-a) with pdf-parser.py while parsing stream objects too (-O), like this: And here we see that this PDF contains URLs (/URI). Thus we …
Read more “Phishing PDF With Incremental Updates., (Sat, Mar 14th)”
Someone asked me for help with this phishing PDF. Taking a look with pdfid.py: Nothing to see here, except Stream Objects (/ObjStm). When stream objects are detected, it’s best to generate statistics (-a) with pdf-parser.py while parsing stream objects too (-O), like this: And here we see that this PDF contains URLs (/URI). Thus we …
Read more “Phishing PDF With Incremental Updates., (Sat, Mar 14th)”
Someone asked me for help with this phishing PDF. Taking a look with pdfid.py: Nothing to see here, except Stream Objects (/ObjStm). When stream objects are detected, it’s best to generate statistics (-a) with pdf-parser.py while parsing stream objects too (-O), like this: And here we see that this PDF contains URLs (/URI). Thus we …
Read more “Phishing PDF With Incremental Updates., (Sat, Mar 14th)”
Someone asked me for help with this phishing PDF. Taking a look with pdfid.py: Nothing to see here, except Stream Objects (/ObjStm). When stream objects are detected, it’s best to generate statistics (-a) with pdf-parser.py while parsing stream objects too (-O), like this: And here we see that this PDF contains URLs (/URI). Thus we …
Read more “Phishing PDF With Incremental Updates., (Sat, Mar 14th)”