← Back to Feed

PureRAT Campaign Targets Job Seekers, Abuses Foxit PDF Reader for DLL Side-loading

December 3, 2025 · Trend Micro · Severity: MEDIUM

Job seekers looking out for opportunities might instead find their personal devices compromised, as a PureRAT campaign propagated through email leverages Foxit PDF Reader for concealment and DLL side-loading for initial entry.

Key Takeaways

  • A PureRAT campaign targeting job seekers propagates through email and abuses Foxit PDF Reader for concealment and DLL side-loading for initial entry.
  • Job seekers looking for opportunities could instead find their personal devices compromised by the malware.
  • Email users should be cautious with job-related attachments, as DLL side-loading via PDF readers enables PureRAT delivery.
☕ Buy a Coffee