Foxit PDF Reader - Tool

Threat entity extracted from intelligence sources

Frequency
4
occurrences
First Seen
December 4, 2025
Last Seen
July 9, 2026

Foxit PDF Reader is a tool tracked across 3 threat clusters and 4 intelligence report mentions on ThreatCluster. First observed December 4, 2025; most recent activity July 9, 2026.

Related Threat Clusters

  • Foxit Patches 20 Vulnerabilities in PDF Reader and Editor

    On July 8, 2026, Foxit Software released updates for its PDF Reader and Editor to address 20 vulnerabilities, including multiple use-after-free flaws that could lead to remote code execution (RCE). The vulnerabilities,…

    5 articles · Updated July 9, 2026
  • AI-Driven Phishing Campaign Distributing PureRAT Malware

    A Vietnamese threat actor is utilizing AI to create code for a phishing campaign that delivers PureRAT malware and other malicious payloads. The campaign targets individuals with job-themed emails, luring them to open…

    2 articles · Updated January 30, 2026
  • Exploitation of Foxit PDF Reader Leads to Data Theft

    Threat actors are exploiting vulnerabilities in Foxit PDF Reader to gain unauthorized access to systems and steal sensitive data. This issue affects users of the software, with the potential for significant data…

    2 articles · Updated December 4, 2025

Recent Intelligence Reports

  • Foxit Patches Multiple Use-After — Gbhackers · July 9, 2026
  • PureRAT: Attacker Now Using AI to Build Toolset — Security · January 28, 2026
  • Threat Actors Exploit Foxit PDF Reader to Seize System Access and Steal Data — Gbhackers · December 4, 2025
  • Threat Actors Leveraging Foxit PDF Reader to Gain System Control and Steal Sensitive Data — Cybersecuritynews · December 4, 2025

CVSS v3.1 Breakdown