It's 2022 and there are still malware-laden PDFs in emails exploiting bugs from 2017