However, threat actors are increasingly using SVG files in their phishing campaigns according to security researcher MalwareHunterTeam, who shared recent samples [1, 2] with BleepingComputer.

It’s not SVG — yes, he was near-perfect in his debut win (138.1), but he dropped to 83.5 last year after finishing 40th.

Just last September, Chris Buescher pounced on a final-lap mistake to top SVG head-to-head at Watkins Glen, and the RFK Racing veteran holds a Next Gen-best average finish of 8.79 on road courses.

It’s worth noting that the use of SVG files inside HTML containing base64-obfuscated code isn’t new. The same technique was observed in malspam delivering Qbot malware in December 2022.