QuartzLine: A PDF Viewer Deploying a Backdoor at Scale

ShadowTalk: Powered by ReliaQuest · Oct 21, 2026 · 24m

In this episode of ShadowTalk, John Dilgen and Tehman Tariq examine QuartzLine, a malware campaign disguised as a legitimate, signed Windows PDF viewer. The application works as advertised while quietly maintaining persistence, stealing browser data, and waiting for instructions to deploy backdoors at scale. The discussion covers the campaign’s malvertising delivery chain, its evasion techniques, and why blocked C2 traffic should be treated as a confirmed compromise. Learn what defenders can do now to hunt for persistence, close software-access gaps, and automate containment before the…