Security Basics: AW: Manipulate PDFs with Malware

["Booth, Daryl" <Daryl.Booth () mobil-isc de>]

Hi,

in the opening process it would be a pain because of possible detection being high.  Playing man in the middle 
scenarios would be a very easy way though.

Best Regards
 
 
Daryl Booth
 


-----Ursprüngliche Nachricht-----
Von: listbounce () securityfocus com [mailto:listbounce () securityfocus com] Im Auftrag von Andre Silaghi
Gesendet: Sonntag, 20. Januar 2013 06:59
An: security-basics () securityfocus com
Betreff: Manipulate PDFs with Malware

Hello everybody,

Let me just explain to you a scenario before I ask my question about it. You are starting to download a PDF file 
including a barcode which is used to identify some payment information like the ammount of money you have to pay and 
the receiver, maybe identified by another sequence which is included.

Would it be possible to manipulate this barcode easily before or during the opening process of the PDF in order to 
change the payment information in a way that the attacker's information is encoded there?

Have you any experience with malware like this?

Best regards,
André

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and 
who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell 
if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your 
Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing 
management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------