In which stage of the Cyber-Attack Lifecycle would the attacker inject a PDF file within an email?

Weaponization involves packaging an exploit with a backdoor or payload into a deliverable format, such as embedding malicious code within a PDF document and preparing it for delivery via email.

Reconnaissance is the initial stage of gathering information about the target, not creating or delivering malware.

Installation occurs after successful exploitation, where the attacker installs persistent access mechanisms on the compromised system.

Command and Control (C2) is the stage where the attacker establishes communication with the compromised system to issue commands and exfiltrate data.

Exploitation is the act of leveraging a vulnerability to run code on a target system, which happens after the weaponized payload is delivered and executed.