Pretty Darn Fancy

TA!Fancy!PDF

  27 June 2007

Description

Using a PDF file in place of an image (and especially compressed PDFs) to avoid tokenizedation.

Submitted by Joe Chongq.

Example

An example where a PDF sent in a pump-and-dump spam is made to look official (click to enlarge):

Another example, that looks more like 'classical' image spam:

Note that the letters are actually made up of many different colours:

See also blog entries 'Pretty Darn Fancy: Stock spammers using PDF files' and 'Pretty Darn Fancy: Even More Fancy Spam'.

Quick Links

Poll

When do you install software updates?
As soon as they are released
As soon as I have some time
I take my time, but I always install them eventually
Only when I feel it is absolutely necessary
Never
Leave a comment
View 12 comments
Jobs Recruit Sidebar
Twitter Feed

virusbtn: RT @emailsecmatters: The typical spam message has sources as diverse as the spam lunch meat: http://ht.ly/2yucd
2 hours ago

virusbtn: Can anyone write a rap about our RAP tests (http://bit.ly/255ySQ) and submit it to the Symantec competition http://bit.ly/bOJg8r
6 hours ago

VB2010

VB2010 VB2010 will take place 29 September - 1 October 2009 at the Westin Bayshore, Vancouver, BC, Canada.
Virus Bulletin currently has 208,224 registered users.