PDF files can be malicious. While this generally only happens with unpatched software, there's a LOT of PDF-rendering software out there now, including, it seems, almost every damn app on my computer or my phone. Guaranteed at least one of them is vulnerable to at least one exploit. Also, there have been several PDF zero-day flaws in the past: there could be more to come.
No attachment is safe like opening an email... and if you talk to security experts, they can come up with examples of how just opening an email can be a problem, too.
General rule of thumb: do not open any attachments, ever. The exception is if you know the sender and are expecting an attachment from them. If you must open an unknown attachment (and do not have a sandboxed system where you can do so safely), save it first, make sure it gets or automatically got scanned, then open it.
I don't want to provide any specific advice about the email in question; assessing whether or not it's a threat is complicated, can involve specialized expertise, and noticeable amounts of time.
There's risk in just being connected to the Internet - you want to minimize the risk as much as feasible, not as much as possible. (Turning off the computer more or less eliminates any risk, after all...)
-Adam
Get Outlook for Androidhttps://aka.ms/AAb9ysg ________________________________ From: Roundtable roundtable-bounces@muug.ca on behalf of eh@eduardhiebert.com eh@eduardhiebert.com Sent: Tuesday, January 18, 2022 9:00:08 PM To: roundtable@muug.ca roundtable@muug.ca Subject: [RndTbl] Fwd: Can a pdf file itself be maleware Fwd: FW: remittance Message Payment Status Notification
Hi,
This is likely phishing spam and passing around for further information.
Just opening an email without clicking on anything I understand can be safe.
I would rather ask than be sorry. Is this also true of pdf files?
If someone can open safely I would like to have a sense who is behind this one.
Thanks,
Eduard
-------- Forwarded Message --------
SUBJECT: FW: remittance Message Payment Status Notification
DATE: Wed, 19 Jan 2022 06:15:45 +0800
FROM: Accounting Clerk michaelgarnett1233@gmail.com
Hello,
Open Attached PDF to confirm remittance info.
TRYR GROUP ACCOUNT
Account clerk
11524 Scenic Hills Blvd
-------------------------