Byte Bandits: How Fake PDF Converters Are Stealing More Than Just Your Documents

A phishing campaign where threat actors mimicked the legit pdfcandy[.]com site to distribute malware. Users were tricked into running a PowerShell command, triggering the download of a ZIP payload containing ArechClient2.