PDF Viewer is a malicious browser extension used by Jewelbug that runs on Chrome and Firefox. It requests dangerous permissions to access cookies, run scripts, intercept web requests, and harvest credentials. It also includes a clipboard clipper to swap cryptocurrency wallet addresses.