other
Trojanized PDF viewer distributed from a domain impersonating Enveil; launches an embedded payload when a hidden PDF marker is found.
No current published clusters are mapped here yet.