Knowbe4 iconKnowbe4Sep 11, 2026

Phishing Campaign Targets Employees with Malicious SVG Files

Researchers at INKY observed a major phishing campaign that used SVG (Scalable Vector Graphics) image files to deliver malicious JavaScript. While abuse of SVG files isn't new, INKY says their use in phishing campaigns has exploded over the past year.

Phishing Campaign Targets Employees with Malicious SVG Files

Share this story

Send the public story page.

Useful takeaways from this story.

Researchers at INKY observed a major phishing campaign that used SVG (Scalable Vector Graphics) image files to deliver malicious JavaScript.

While abuse of SVG files isn't new, INKY says their use in phishing campaigns has exploded over the past year.

Building the complete brief

The page is ready to read now. The fuller skim-friendly version will appear here automatically.

The useful part

Researchers at INKY observed a major phishing campaign that used SVG (Scalable Vector Graphics) image files to deliver malicious JavaScript. While abuse of SVG files isn't new, INKY says their use in phishing campaigns has exploded over the past year.

Keep reading in the app

Open the app view to save this story, compare related coverage, and continue from the same source.

Open in app