[darkwater]

GP attack vector was probably recruiter editing the CV to put their company name in some place and forward it to some client. They are lazy enough to not even copy-paste the CV.

[jkaplowitz]

Yeah, and they can do that with simple easily findable and downloadable free graphical software to strip the security, nothing super-technical needed.