Do Not Open This PDF On A Microsoft Windows PC
Do not open this PDF—delete on sight.
A few weeks on from Microsoft warning Windows users that PDF attachments are increasingly being used in attacks, there's another warning and a new lure. While the Windows-maker's alert for PC users came ahead of tax day in the U.S., the new attack is less time critical and has a nasty trick in how it masks its malicious intent.
Microsoft's tax day warning called out 'PDF attachments with an embedded DoubleClick URL that redirected users to a Rebrandly URL shortening link. That link in turn redirected the browser to a landing site that displayed a fake DocuSign page hosted on a domain masquerading as DocuSign.'
When users clicked to download, 'the outcome depended on whether their system and IP address were allowed to access the next stage based on filtering rules set up by the threat actor.' This was a clever form of obfuscation to make it more difficult for security researchers to replicate the attack and craft a fix.
Now, the team at TrustWave SpiderLabs warn 'we've spotted a campaign delivering RemcosRAT, using a fake payment SWIFT copy to lure victims. The attached PDF links to an obfuscated JavaScript file that uses ActiveXObject to fetch a second-stage script. This script invokes PowerShell to download and decode an image hosted on archive.org, which appears harmless but conceals the Remcos payload using steganography.'
Again, obfuscation here is key. The latest trickery in malicious PDFs is to hide links behind QR codes or to compile PDFs without the usual URL tag, making it harder to a security scan to pick up the treat. Steganography takes this to a new level, hiding the link in an image, and making it all but impossible for a user to detect.
As Kaspersky explains, 'steganography is the practice of concealing information within another message or physical object to avoid detection. Steganography can be used to hide virtually any type of digital content, including text, image, video, or audio content. That hidden data is then extracted at its destination. Content concealed through steganography is sometimes encrypted before being hidden within another file format. If it isn't encrypted, then it may be processed in some way to make it harder to detect.'
According to Cybersecurity News, the new attack 'begins with a phishing email that attaches a PDF file contains a malicious link, specifically pointing to malicious webpage: https://huadongarmouredcable.com/pdf/default.php… luring victims into a multi-stage infection process designed to deliver RemcosRAT, a malware known for its ability to remotely control infected systems.'
RemcosRAT is a nasty trojan you don't want anywhere near your PC. But the warning is not really that specific. PDFs are highlighted as a new favorite for cyber attacks, given user wariness as regards Office documents. The feeling amongst users seems to be that PDFs are more benign and therefore safer. Unfortunately, that's not the case.
As for what to look for here. An email headed 'SWIFT Copy' that purports to confirm a bank transfer with an attacked receipt. While for most this lure is typical of the raft of latest threats, these campaigns are hitting plenty of marks. That's why they proliferate.
Delete on sight.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Yahoo
38 minutes ago
- Yahoo
Wells Fargo Raises PT on Microsoft (MSFT), Keeps Overweight
Microsoft Corporation (NASDAQ:MSFT) is one of the 10 software stocks analysts are upgrading. On June 13, Wells Fargo upped the price objective on the company's stock to $565 from $515, while keeping an 'Overweight' rating, as reported by The Fly. As per the firm, the investors need to be selective during the summer in software. Overall, H2 of the year is expected to be aided by a rebound as macro noise takes a breather and seasonal buying starts to pitch in. In Q3 2025, Microsoft Corporation (NASDAQ:MSFT)'s cash flow from operations came in at $37 billion, reflecting a rise of 16%. This was aided by robust cloud billings and collections, which were partially offset by increased tax payments. A development team working together to create the next version of Windows. For Intelligent Cloud, in Q4 2025, Microsoft Corporation (NASDAQ:MSFT) expects revenue to come between $28.75 billion – $29.05 billion, or growth of 20% – 22% in constant currency. The revenue is expected to be driven by Azure, which can have quarterly variability mainly from in-period revenue recognition depending on the mix of contracts. In Azure, Microsoft Corporation (NASDAQ:MSFT) expects Q4 2025 revenue growth of between 34% – 35% in constant currency, aided by robust demand for its portfolio of services. RiverPark Advisors, an investment advisory firm and sponsor of the RiverPark family of mutual funds, released its Q1 2025 investor letter. Here is what the fund said: 'Microsoft Corporation (NASDAQ:MSFT) shares were lower in the quarter despite reporting solid results. Investor expectations around AI monetization timelines moderated, and there was some rotation out of mega-cap tech. Microsoft remains a key enabler of enterprise digital transformation, with leading positions in cloud infrastructure, productivity software, and AI services. With durable growth, operating leverage, and strategic positioning across multiple secular trends, we remain highly confident in Microsoft's long-term outlook.' While we acknowledge the potential of MSFT to grow, our conviction lies in the belief that some AI stocks hold greater promise for delivering higher returns and have limited downside risk. If you are looking for an AI stock that is more promising than MSFT and that has 100x upside potential, check out our report about this cheapest AI stock. READ NEXT: 13 Cheap AI Stocks to Buy According to Analysts and 11 Unstoppable Growth Stocks to Invest in Now Disclosure: None. Sign in to access your portfolio
Business Insider
4 hours ago
- Business Insider
CRWV vs. PLTR vs. NVDA: Which Is the Best AI Stock to Buy Now, According to Analysts?
The stock market remains volatile due to geopolitical tensions and macro uncertainty, raising concerns about a potential slowdown in AI (artificial intelligence) spending. Nonetheless, Wall Street remains confident about several AI stocks, given the massive growth opportunity in the generative AI space over the long term. Using TipRanks' Stock Comparison Tool, we placed CoreWeave (CRWV), Palantir Technologies (PLTR), and Nvidia (NVDA) against each other to find the best AI stock, according to Wall Street analysts. Confident Investing Starts Here: CoreWeave (NASDAQ:CRWV) Stock CoreWeave, a cloud provider that specializes in AI infrastructure, is experiencing strong traction for its offerings amid the ongoing AI boom. The company has been in the news for its strategic deals. Notably, CoreWeave struck a $11.9 billion 5-year cloud computing contract with ChatGPT-maker OpenAI. The two AI companies also signed an expanded agreement of up to $4 billion to meet the growing demand for high-performance computing. Furthermore, CoreWeave is reportedly powering the recently announced cloud deal between Alphabet's Google (GOOGL) and OpenAI. CRWV stock has rallied by a staggering 359% from its IPO (initial public offering) price of $40. Is CRWV a Good Stock to Buy? Recently, Bank of America analyst Bradley Sills downgraded CoreWeave stock to Hold from Buy on valuation concerns, following the stellar rally in the AI infrastructure stock in reaction to the Q1 earnings. The 4-star analyst highlighted that CRWV stock is trading at an elevated valuation of 2027 EV/EBIT (enterprise value-to-earnings before interest and taxes) of 25x. While Sills noted several positives, like the expansion of CoreWeave's partnership with OpenAI and impressive revenue momentum, he pointed out the company's huge capital expenditure ($46.1 billion through 2027). Consequently, the analyst expects $21 billion of negative free cash flow through 2027. Turning to Wall Street, CoreWeave stock scores a Moderate Buy consensus rating based on six Buys, 11 Holds, and one Sell recommendation. The average CRWV stock price target of $78.53 indicates a significant downside risk of 57.2% from current levels. Palantir Technologies (NASDAQ:PLTR) Stock Data analytics company Palantir Technologies is considered one of the hottest AI stocks. PLTR stock has rallied more than 81% so far in 2025. The company's revenue is growing at a rapid pace across its Government and Commercial businesses. Palantir's AIP (Artificial Intelligence Platform) offering is bolstering its business. Palantir's market-beating first-quarter results reinforced the strength of its AI-powered offerings. Notably, Q1 2025 revenue increased by 39% year-over-year to $884 million, while adjusted EPS (earnings per share) jumped 62%. Additionally, the company raised its full-year guidance, as it believes that it is in the 'middle of a tectonic shift' in the adoption of its software, mainly in the U.S. Is Palantir Stock a Buy? While several analysts are cautious on Palantir stock due to its lofty valuation, Loop Capital analyst Mark Schappel reiterated a Buy rating and boosted the price target from $130 to a Street-high of $150. Following a meeting with management, the 5-star analyst stated that he is more convinced about PLTR's AI growth story and his bullish investment thesis. Schappel believes that Palantir is an early software leader in enterprise AI, which he thinks is at a 'tipping point,' as small-scale pilots move into production and AI use cases increase exponentially across all industries. Trading at 48x EV/2027 revenue, the analyst agrees that PLTR stock is 'not for the faint of heart.' That said, he contends that investors should look at the big picture, which indicates that Palantir is exposed to a massive AI opportunity. With 10 Holds, three Buys, and four Sells, Wall Street has a Hold consensus rating on Palantir Technologies stock. The average PLTR stock price forecast of $104.27 indicates a possible downside of 24.1% from current levels. Nvidia (NASDAQ:NVDA) Stock After a tough start to the year due to concerns about rising competition in the AI space, chip export restrictions, and tariff woes, Nvidia stock has recovered 21% over the past three months and is up 7.1% year-to-date. While uncertainty around chip exports and competition from custom AI chips remain an overhang, the semiconductor giant continues to gain from robust demand for its GPUs (graphics processing units) in the AI space, as reflected in the market-beating first-quarter results. Looking ahead, the demand for NVDA's Blackwell platform is expected to boost its top-line growth. Moreover, the company's focus on 'sovereign AI,' which it defines as a country's ability to develop and deploy AI, could drive its revenue higher. In this regard, Nvidia's lucrative deals, like the recently announced agreement with Saudi Arabia and Germany, are worth noting. Is Nvidia Stock a Buy, Hold, or Sell? Earlier this month, Bank of America Securities analyst Vivek Arya reiterated a Buy rating on Nvidia stock with a price target of $180. Following a meeting with management, the 5-star analyst noted that the tone of the team was very positive regarding demand for Nvidia's products and continued customer interest across cloud and enterprise, backed by a full-scale supply ramp. Arya believes that management addressed three key investor debates that have been weighing on NVDA stock over the past year – Blackwell rack ramp and execution, AI diffusion and sovereign demand, and China AI shipments. The analyst stated that Nvidia stock remains a top sector pick for Bank of America, as it is 'best positioned' to benefit from the ongoing AI boom, bolstered by a multi-year lead in 'performance (AI scaling), pipeline, incumbency, scale, and developer support.' Despite near-term challenges, Wall Street has a Strong Buy consensus rating on Nvidia stock based on 35 Buys, four Holds, and one Sell recommendation. The average NVDA stock price target of $173.19 indicates 20.4% upside potential from current levels. Conclusion Wall Street is highly bullish on Nvidia stock, cautiously optimistic on CoreWeave, and sidelined on Palantir stock. Currently, analysts forecast further upside in chip giant Nvidia's stock while they see possible downside risk in the other two AI stocks. The optimism of most analysts on Nvidia stock is backed by its strong fundamentals, robust demand for its AI chips, continued innovation, and solid execution.
Miami Herald
4 hours ago
- Miami Herald
European leaders seek ‘digital sovereignty' over tech infrastructure
June 21 (UPI) -- Leaders of many European nations say they need to do more to develop technological infrastructure to ensure digital sovereignty instead of relying on services from global tech firms. A recent forum discussion on the market dominance of global corporations assessed the "blurring of the boundaries between economic and political control" among European nations by tech firms. A consensus of attendees at the ongoing Berlin Summit 2025 agreed European nations need to coordinate their efforts to develop infrastructures to "avoid path dependencies and long-term dependence on global platform players," Forum New Economy reported on Friday. "European countries are highly dependent on companies from the USA and China in a variety of technological infrastructures, from cloud services and social media to generative artificial intelligence," Forum New Economy reported. Such companies dominate European markets and are increasing their control of digital infrastructures, innovation networks, supply chains, data flows and research agendas. An example is Microsoft earlier this year suspending the business email account for International Criminal Court prosecutor Karim Khan. The action occurred within months of the ICC issuing a warrant for the arrest of Israeli Prime Minister Benjamin Netanyahu. Although the tech firm suspended Khan's ICC email account, Microsoft officials said it still is providing services for the ICC. The company also announced their intent to support the digital sovereignty of European nations. "We've operated in Europe for more than 40 years, and we have been and always will be a steadfast partner to Europe," Microsoft Chairman and Chief Executive Officer Satya Nadella said in a social media post on Friday. Microsoft is supporting European sovereignty and that of its respective nations with several existing and new tech offerings, Nadella said. The services include Microsoft Sovereign Cloud, Data Guardian, External Key Management and Sovereign Private Cloud. The existing and new offerings "bring digital sovereignty to all European organizations" and"unlock new sovereign ways to run private sovereign clouds," Nadella said. "These new offerings build on decades of pioneering work in sovereign cloud solutions by ourselves and to our partners," he added. Copyright 2025 UPI News Corporation. All Rights Reserved.
