Security researchers at EXPMON have discovered a sophisticated unpatched zero-day vulnerability in Adobe Reader that is being actively exploited in the wild. The attack hides obfuscated JavaScript inside malicious PDFs, requiring only that victims open the document-no further interaction needed-to steal local files, fingerprint systems, and exfiltrate data to a remote server.

The exploit abuses privileged Acrobat APIs to read arbitrary files and send information, with potential for full remote code execution on matching high-value targets. It evades most antivirus detections and works on the latest version of Adobe Reader.

Adobe has been notified, but no patch is available yet. Users should avoid opening unsolicited PDFs and block the known malicious IP until an update is released.