PHISHING EMAILS INCREASINGLY USE SVG ATTACHMENTS TO EVADE DETECTION

Summary from the TLDR InfoSec newsletter

Threat actors are using SVG attachments in phishing emails to avoid detection, with some of them displaying HTML and then executing JavaScript when the image is loaded.