Abstract:
The Portable Document Format (PDF) has become a cornerstone of digital document exchange
due to its platform-independent design and rich feature set. However, its complexity and support for
embedded scripting languages such as JavaScript have made it a prime vector for cyberattacks. This
research presents a comprehensive study of PDF-based malware with a focus on JavaScript injection.
The paper demonstrated the feasibility of distributing a PDF file with embedded JS code inside. The research concludes with practical recommendations for improving enterprise PDF security protocols,
highlighting the need for layered defense strategies in the era of increasingly sophisticated documentbased attacks.
