PH!SH Framework
Framework / Techniques /Malicious Attachment
Sub-technique Payload Delivery

PDF-Files

PDFs containing phishing links or JavaScript-based exploits that execute automatically when opened. These may impersonate invoices, government forms, or shipping confirmation.

Mapped to
MITRE ATT&CK®
T1566.001Spearphishing Attachment T1204.002Malicious File

Connected in PH!SH

Themes
TH0005Document Sharing Service Impersonation TH0015Invoice Phishing TH0016Supply Chain Fraud