Shoulder surfing a malware author

Great blog post by Didier Stevens, who spent some times “looking over the shoulder” of a malware author (by analyzing a malicious PDF and seeing the incremental updates made).