One of the most complex tasks for the cybercriminals is to ensure their malicious code goes undetected by antivirus and achieves its goal. For this, they have invested a lot on more complex infection processes, going beyond the traditional Exploit PDF and using techniques where the malicious payload is hidden in encrypted files – even using a known file format. This is what we found in a new PDF Exploit in the wild: it tries to conceal the malicious files in a Exploit PDF File. And the attack starts with a simple Exploit PDF