For a few days, my SANS ISC mailbox is flooded with emails that delivers SVG files. An SVG („Scalable Vector Graphic“) is a web-friendly vector file format used for graphics and icons. No URL in the body, just “an imageâ€, that's the perfect way to deliver some malicious content. This isn't the first time that we see this technique used by threat actors[1].