4 Jan
2020
4 Jan
'20
06:32
On 01/03/2020 05:51 PM, Carlos E. R. wrote:
I got one spam email, a phishing attempt. No doubts. However, it contains a 3 byte PDF file named index.pdf. What could be its purpose?
cer@Telcontar:~/tmp> hexdump -C index.pdf 00000000 ef bb bf |...| 00000003 cer@Telcontar:~/tmp> file index.pdf index.pdf: UTF-8 Unicode text, with no line terminators cer@Telcontar:~/tmp>
The UTF-8 representation of the BOM is the (hexadecimal) byte sequence 0xEF,0xBB,0xBF https://en.wikipedia.org/wiki/Byte_order_mark -- David C. Rankin, J.D.,P.E.