PDFs have been malware carriers for ages. The problem is even worse on Windows with Acrobat Reader, which is probably the worst program you can have on your computer. I got infected TWICE by just going to webpages, without downloading anything, or without any prompt.