New Class of ‘Shadow Attacks’ Lets Attackers Replace Content in Digitally Signed PDFs

Called "Shadow attacks" by academics from Ruhr-University Bochum, the technique uses the "enormous flexibility provided by the PDF specification so that shadow documents remain standard-compliant."