Reply to thread

Message

<blockquote data-quote="B-boy/StyLe/" data-source="post: 1077505" data-attributes="member: 99565">Yes, PDF seems to be still a pain for a lot of users. I recently watched two clips related to PDF files and double-extensions.[MEDIA=youtube]76Z6dvNyUww[/MEDIA][MEDIA=youtube]25Txv9MmrYA[/MEDIA]I&#039;ve added some additions under the first video, but my comment was deleted for some reason. I guess I will block THE PC Security Channel in my YT recommendations from now on because of the censorship.What I&#039;ve added there was this: &quot;In addition to make the OS show the file extensions and to check the file to the VT, one can check if the file contains JS (for PDF files) - there are tools for that at GitHub like this one - <a href="https://github.com/filipi86/MalwareAnalysis-in-PDF" target="_blank">GitHub - filipi86/MalwareAnalysis-in-PDF: Malicious PDF files recently considered one of the most dangerous threats to the system security. The flexible code-bearing vector of the PDF format enables to attacker to carry out malicious code on the computer system for user exploitation.</a> and to disable the JS in the PDF Viewers as well (for FF - pdfjs.enableScripting), for Edge - well it&#039;s disabled there, for Adobe and Foxit and the others there are settings for that as well but since I don&#039;t use them anymore I forgot where they were located, but they should be easy to find. I prefer to use Comodo Auto-Containment and Kaspersky Free (because of the System Watcher which can roll back the changes introduced by the ransomware), and off course a system image is recommended as well. I use Macrium Reflect for that purpose (and AOMEI and Hasleo are covering its back).&quot;</blockquote>

[QUOTE="B-boy/StyLe/, post: 1077505, member: 99565"] Yes, PDF seems to be still a pain for a lot of users. I recently watched two clips related to PDF files and double-extensions. [MEDIA=youtube]76Z6dvNyUww[/MEDIA] [MEDIA=youtube]25Txv9MmrYA[/MEDIA] I've added some additions under the first video, but my comment was deleted for some reason. I guess I will block THE PC Security Channel in my YT recommendations from now on because of the censorship. What I've added there was this: "In addition to make the OS show the file extensions and to check the file to the VT, one can check if the file contains JS (for PDF files) - there are tools for that at GitHub like this one - [URL="https://github.com/filipi86/MalwareAnalysis-in-PDF"]GitHub - filipi86/MalwareAnalysis-in-PDF: Malicious PDF files recently considered one of the most dangerous threats to the system security. The flexible code-bearing vector of the PDF format enables to attacker to carry out malicious code on the computer system for user exploitation.[/URL] and to disable the JS in the PDF Viewers as well (for FF - pdfjs.enableScripting), for Edge - well it's disabled there, for Adobe and Foxit and the others there are settings for that as well but since I don't use them anymore I forgot where they were located, but they should be easy to find. I prefer to use Comodo Auto-Containment and Kaspersky Free (because of the System Watcher which can roll back the changes introduced by the ransomware), and off course a system image is recommended as well. I use Macrium Reflect for that purpose (and AOMEI and Hasleo are covering its back)." [/QUOTE]

Verification