Re:A fake job offer took down Axie Infinity
by kuboble on Wednesday July 06, 2022 @01:39PM
(#32004247)
It might be hard to believe that the particular person in a particular company did that, but given a lot of attempts, dedication and lucky / unlucky circumstances eventually somewhere someone will trust a malicious person and will get socially engineered into opening a pdf on a working computer.
[ Parent
| on HN ]
Re:A fake job offer took down Axie Infinity
by godot on Wednesday July 06, 2022 @01:46PM
(#32004358)
Also wonder if the PDF exploit works for only local/native PDF readers (e.g. Adobe Readers) or also web-based. If someone occasionally checks their personal email from a work laptop, chances are they'd only use the Gmail preview to open the PDF. It seems like most engineers wouldn't get all the way to downloading a job offer PDF to their work laptop and opening it up there.