The emotive title is a deliberate attention grabber, this talk is around the problem that we all face at work, home and study. Attackers sending malicious documents designed to infect our machines. The focus of this talk is about how the ubiquitous PDF format has been highjacked and turned into a weapon that can defeat AV and turn our machines into zombies controlled by evil nefarious masterminds hiding in cyberspace.

The objective of this talk is to educate the curious amongst us as to how the PDF file can be used as a weapon, how that use can be detected and how to protect against a malicious PDF. For the penetration tester this talk will show you how important it is to understand file formats and capabilities if you want to conduct advanced testing like social engineering in a no holds barred engagement where employees are fair game. For those doing forensics it will show how reverse engineering and knowledge of file formats can help detect how an attacker got into a network as part of incident response, and how forensic investigations can be an interesting growth career, especially with GDPR requiring breech investigation.