New Wave Of Phishing Emails with SVG Files, (Tue, Jun 2nd)

SANS ISC reports a recent spike in phishing campaigns delivering SVG (Scalable Vector Graphic) attachments that contain or trigger malicious content without embedding clickable URLs, a technique used to evade simple URL-based detection. The diary also notes an unidentified RAT observed pushing NetSupport RAT to victims, plus related community updates: YARA-X 1.17.0 release, an analysis of a year of files uploaded to DShield sensors, and a forensic reconstruction of an Akira ransomware kill chain. Multiple daily Stormcast podcast entries summarize these and other security topics.