MEDIUMPhishing
Global

New Wave Of Phishing Emails with SVG Files, (Tue, Jun 2nd)

·Source: SANS ISC

Updated:

Executive Summary

For a few days, my SANS ISC mailbox is flooded with emails that delivers SVG files. An SVG ("Scalable Vector Graphic") is a web-friendly vector file format used for graphics and icons. No URL in the body, just “an image”, that&#x27s the perfect way to deliver some malicious content. This isn&#x27t the first time that we see this technique used by threat actors&#x5

Analysis

For a few days, my SANS ISC mailbox is flooded with emails that delivers SVG files. An SVG ("Scalable Vector Graphic") is a web-friendly vector file format used for graphics and icons. No URL in the body, just “an image”, that&#x27s the perfect way to deliver some malicious content. This isn&#x27t the first time that we see this technique used by threat actors[1].
Source Attribution

Originally published by SANS ISC on Jun 2, 2026.

Related Threats