Perfidy, Deception, Fraud - How Much Trust Should We Put in a PDF?

Explore the hidden security vulnerabilities in PDF documents through this 24-minute conference talk that challenges the common perception of PDFs as static and immutable files. Discover how malicious PDF documents can dynamically change their displayed content over time while the file itself remains unchanged, and learn about sophisticated attacks where the same PDF can show different content to different viewers. Examine the fundamental security flaws in PDF architecture and understand why these seemingly trustworthy documents pose significant cybersecurity risks. Gain insights into novel attack vectors that exploit PDF's dynamic capabilities, with detailed technical explanations and proof-of-concept demonstrations available through the accompanying GitHub repository at vlkl-sap/perfidy-deception-fraud.