Recently, cybercriminals have taken advantage of Soda PDF, a PDF viewing service. Using Soda PDF, cybercriminals are sending malicious PDF files in an attempt to trick you into sharing your phone number and payment information. This scam can be difficult to recognize because Soda PDF is a legitimate service. So, it’s important to learn how to protect yourself and others.

With this attack method, cybercriminals use Soda PDF to send you an email with a PDF file. The file will contain a phone number prompting you to call if you have any questions. If you call this number, a cybercriminal will ask for your payment information. The cybercriminal can then use your shared information to steal your money and call you for additional scams.

Follow the tips below to spot similar scams:

• Never click a link or download an attachment in an email that you aren’t expecting. 
• Think before calling unknown phone numbers. Verify that a phone number is legitimate by navigating to the organization’s official website. 
• Remember that this type of attack isn’t exclusive to Soda PDF. Cybercriminals could use this technique to exploit any file-sharing service.