Phishing Emails Use SVG Files to Avoid Detection

Threat actors are increasingly abusing SVG email attachments—leveraging their XML-based, text-heavy format and embedded JavaScript—to display fraudulent forms, auto-redirect to phishing sites, or trigger malware downloads while evading many security detections. Recent campaigns reported by BleepingComputer show very low antivirus hits on VirusTotal, underscoring the need for users to treat unsolicited SVGs as suspicious, especially those mimicking documents or login prompts; organizations are urged to strengthen user awareness to counter these phishing tactics.