Security companies alerted PDF users today of a new malware attack that hopes to exploit users of PDFs by using an unpatched design flaw in the PDF format. Mary Grace Gabriel, a research engineer in CA Inc.’s security group, stated on her blog, ‘CA ISBU recently received spam emails disguised as a legitimate email from ‘your Company System Admin’. The spam mail informs the recipient about a recent change in mailbox servers and requires the user to check the malicious PDF attachment containing the instructions to update mail settings.’