Re: Manipulate PDFs with Malware
Nick Clark <[email protected]>
| Newsgroups | gmane.comp.security.basics |
|---|---|
| Message-ID | <[email protected]> |
Depends on how the PDF is formed. If they are just using an image or flat text, I cannot think of any easy way to do this. If they are using a form, and this barcode has a set attribute field, then you could probably search for the field and replace it with whatever you'd like to. --- Nick Clark On Jan 19, 2013, at 10:59 PM, Andre Silaghi <[email protected]> wrote: > Hello everybody, > > Let me just explain to you a scenario before I ask my question about > it. You are starting to download a PDF file including a barcode which > is used to identify some payment information like the ammount of money > you have to pay and the receiver, maybe identified by another sequence > which is included. > > Would it be possible to manipulate this barcode easily before or > during the opening process of the PDF in order to change the payment > information in a way that the attacker's information is encoded there? > > Have you any experience with malware like this? > > Best regards, > André > > ------------------------------------------------------------------------ > Securing Apache Web Server with thawte Digital Certificate > In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates. > > http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1 > ------------------------------------------------------------------------ > ------------------------------------------------------------------------ Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates. http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1 ------------------------------------------------------------------------