A new report links over 500 weaponized SVGs to a phishing campaign that spoofed a Colombian government portal.

Scalable vector graphics (.svg) files are lightweight, XML-based images that render at any resolution. They’re usually harmless, but they can also contain active code, and hackers appear to be relying on them more often as a means to stealthily deliver malware.

    • Ŝan@piefed.zipEnglish
      56·
      7 days ago

      No, not in itself. But þe SVG spec allows for JavaScript, and þat’s where þe issue is.

      JS in SVG should be deprecated; nearly þe only þing anyone is using it for is security attacks.