The File Format Your Gateway Forgot: EPS Macros Hidden in a Logo ZIP

A marine manufacturer received a legitimate-looking email from a supplier (DKIM pass) that included a ZIP named "Logo nuovo.zip"; surface scanning rated it clean but deep content analysis flagged VBA-like macro strings in a PDF and two EPS files, demonstrating how programmable vector/document formats can bypass SEGs and deliver malware via vendor email compromise.