Novel (?) PDF attack (and a new PDF visualization/threat assessment tool): injecting JavaScript into the encrypted section of Adobe Type 1 font binaries is not detectable by malware scanners (nor does it interfere with the decryption of the font)

Web: https://www.reddit.com/r/cybersecurity/comments/xejdve/novel_pdf_attack_and_a_new_pdf/

See [this Twitter thread](https://twitter.com/Cryptadamist/status/1570167937381826560) with most of the details.

Apologies if this isn't new but the fact that none of the malware detection tools alert on it coupled with the fact that I could find nothing about this sort of thing on the internet suggested to me that it was a new kind of thing. No idea if this exploits a still extant vulnerability or an old one, but if you can help sort out what the malicious code is …

adobe assessment attack cybersecurity decryption encrypted javascript malware pdf scanners threat threat assessment tool visualization