Phishing emails increasingly use SVG attachments to evade detection

The report details how threat actors are increasingly abusing SVG attachments to evade detection by embedding HTML and JavaScript that display phishing forms (e.g., fake Excel login pages) or download malware; samples uploaded to VirusTotal and reported by BleepingComputer show low vendor detections, making unsolicited SVGs particularly risky and recommending they be treated with suspicion.