The file is not just a document; it is a clever and dangerous piece of malware that uses a specialized trick called the Right-to-Left Override (RTLO) to fool the human eye.

In reality, the file Elena saw was a lie. The true name of the file on the server was executare_silita_an[RTLO]fdp.exe .

In Windows, always check "File name extensions" in the View tab of your folder. A real PDF will end in .pdf , but a trick file might show up as .pdf.exe .

Because of the RTLO character, the computer displayed fdp.exe in reverse: .