SVG files are offering cybercriminals an easy way in with new phishing attacks SVG files could pose a security risk, experts warn.
The best way (aside from not clicking on shady email attachments) is to open a known, benign SVG file on the computer, and instruct Windows to always open it in Notepad, or a similar non-browser program.
Since SVG files are usually loaded natively inside a browser, they can contain anchor tags, scripts, and other kinds of active web content.
Hackers are using .SVG files in new phishing attacks aimed at stealing people’s Office 365 login credentials, experts have warned.
SVG (Scalable Vector Graphics) files are XML-based images that can be scaled without losing quality, making them ideal for web design, icons, and illustrations.
