SVG malware campaign uncovered by VirusTotal

According to Security Affairs, VirusTotal researchers uncovered a sophisticated phishing campaign using SVG files to impersonate the Colombian justice system, showcasing the evolving tactics of cyber attackers.

The phishing campaign involved SVG files embedded with hidden JavaScript, creating fake login pages for the Colombian Fiscalía General de la Nación. Despite being outdated, SWF files were also found to be exploited in attacks, with 466 out of 47,812 unique SWFs flagged as malicious. The use of SVGs and SWFs in cyberattacks underscores the challenges faced by traditional antivirus tools in detecting such threats.

The incident highlights the importance of deeper analysis tools like VirusTotal's AI-powered Code Insight in uncovering hidden malware within seemingly harmless files and the need for enhanced cybersecurity measures to combat evolving threats, as attackers continue to leverage sophisticated techniques to evade detection.

Source: Security Affairs