Increase In Use Of PDFs For Spam

This report describes an active spam campaign in which attackers upload PDF files containing obfuscated JavaScript to legitimate sites (college, government, and wiki pages) to redirect users to malicious landing pages and fake stores; the author provides examples of infected PDF URLs, a JavaScript snippet used for redirection, and the final redirected domains.