Threat actors increasingly use Scalable Vector Graphics (SVG) attachments to display phishing forms or deploy malware while evading detection.

Strip or block script tags.” The SVG uses XOR-encrypted JavaScript, and once viewed in a browser, it decodes and runs a redirect to an actor-controlled final URL with Base64 encoding for victim ...

Web Engine’s graphics rendering produces “comparable quality rendered graphics in both HTML and SVG” for radial and linear shading, transparency and transparency mapping, anti-aliasing ...

RVML does, however, support SVG’s path tag. If you create some named objects in an illustration tool and save the drawing in SVG format, you can treat that drawing as an animation template.

An unusual phishing technique has been observed in the wild, hiding empty SVG files inside HTML attachments pretending to be DocuSign documents.

Learn the meaning of HTML (Hypertext Markup Language), the role HTML files play in the development and delivery of webpages, and the syntax used to create them.

SVG files are XML-based and can contain HTML and JavaScript, which criminals can exploit for malicious purposes.