Check Point Software Technologies has announced PDFguard, an advanced AI engine designed to prevent malicious PDFs that employ deceptive tactics. PDFguard claims to identify 25% more malicious files than its predecessor, most of which have never been seen before!
“PDFs are particularly attractive to attackers due to their complex structure, which allows them to conceal harmful links, malicious code, or other dangerous content. By leveraging users’ familiarity with PDFs and using social engineering techniques, attackers increase the likelihood of deceiving recipients,” says Check Software’s Security Evangelist Shayimamba Conco.
In recent years, PDFs emerged as a primary vector for attack chains, with threat actors exploiting their widespread use and complexity to deliver malware through sophisticated social engineering tactics.
The Growing Threat of Malicious PDFs
Organisations generally use email and PDFs in standard business communications and are widely regarded as safe and reliable. This false sense of safety has resulted in 68%of malicious attacks delivered through email last year, with 22% of these are PDF-based attachments, according to Check Point Research.
These malicious PDFs are used not only in phishing campaigns but also as part of multi-stage attack chains that can ultimately lead to serious threats like ransomware infections. Given their ubiquity in business environments, PDFs have become a significant vector for cyber threats.
Introducing PDFguard
PDFguard uses a multi-layered, AI approach to analyse PDFs for indicators of malicious behaviour. Its capabilities include:
- Natural language processing (NLP): Detects social engineering language designed to trick users into clicking malicious links or downloading harmful content.
- Image and structural analysis: Examines the internal structure of PDFs to identify anomalies and hidden threats.
- Cross-domain threat detection: Inspects embedded URLs and QR codes for malicious redirection.
- Dynamic analysis: Executes the PDF in a sandbox environment to observe real-time behaviour, such as unauthorised downloads or script execution.
Above are some of many extraction features that are constantly being upgraded.
“As cyber threats evolve, particularly those exploiting common file formats like PDFs, it’s imperative to adopt advanced security solutions,” Conco says.
“PDFguard represents a significant advancement in detecting and preventing PDF-based malware, leveraging AI to stay ahead of sophisticated attack vectors. By integrating PDFguard into your cyber security strategy, you enhance your organization’s resilience against emerging threats,” he concludes.
Also Read: Check Point Acquires Veriti to Boost AI-Driven Threat Exposure Management
