logo

New MatrixPDF toolkit turns PDFs into phishing and malware lures

ID: b4bacdd1-1e0c-5f51-87a9-392407546a8a

STIX ID: report--b4bacdd1-1e0c-5f51-87a9-392407546a8a

Feed Name: Bleeping Computer

Threat Score
65/100

Date Published: 2025-09-30

Date Updated: 2026-07-18

Author: Lawrence Abrams

...
...

A newly observed toolkit named MatrixPDF enables attackers to convert legitimate PDFs into interactive phishing lures that embed JavaScript actions, blurred/locked content and clickable overlays to redirect users to phishing pages or malware downloads. Varonis researchers found the tool advertised on cybercrime forums and demonstrated it can bypass Gmail filters by using externally hosted content and user-initiated links, and the developer markets it for phishing simulations and blackteam use.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.