Malicious PDFs emerge as major cybersecurity threat in Latin America

Malicious PDF files have emerged as a significant cybersecurity threat in Latin America, with over 107,000 detections recorded during the first half of 2026. Cybercriminals are increasingly utilizing PDF/Phishing tactics because the format is deeply integrated into daily professional and personal routines, such as handling invoices, legal summons, and contracts.

These attacks employ various methods to compromise users. Some malicious PDFs contain embedded scripts or exploit vulnerabilities within PDF reader software. Others act as a gateway for social engineering, using fake links, malicious QR codes, or instructions that trick victims into downloading secondary malware.

In one documented case in Colombia, attackers sent emails with PDF attachments that, when clicked, downloaded a compressed RAR file. This file contained a remote access trojan (RAT) that allowed attackers to gain control over the infected devices.