QuartzLine: A PDF Viewer Deploying a Backdoor at Scale

In this episode of ShadowTalk, John Dilgen and Tehman Tariq examine QuartzLine, a malware campaign disguised as a legitimate, signed Windows PDF viewer. The application works as advertised while quietly maintaining persistence, stealing browser data, and waiting for instructions to deploy backdoors at scale. The discussion covers the campaign’s malvertising delivery chain, its evasion techniques, and why blocked C2 traffic should be treated as a confirmed compromise. Learn what defenders can ...