WhatsApp trick: Android malware can impersonate PDF file

How does anyone allow installation of an android app from the pdf file without any suspiciousness ? 🤨

It sounds silly, but people that would be tricked by a simple phishing, might fall of this one too. If threat actor adds a social engineering, then it's a possible and new attack scenario. Of course, we talk about non tech people.

@0x6rss 👏

yah no one would install a pdf file except grannies

What about png payloads?

I dont know, I haven't tested png extension

who install a pdf?????? lol

PDF.APK, the warning sign and ‘install’ should be enough red flags 🚩

I already report this to whatsapp, but it's required social engineering. So.. Yeah, it's still there 😁