Comment on Adult sites are stashing exploit code inside svg filesparentComments−Symbiote1yThe Malwarebytes article[1] explains that the users downloaded (possibly automatically) the SVG files and then opened them in the default viewer, which is MS Edge.[1] https://www.malwarebytes.com/blog/news/2025/08/adult-sites-t...−bapak1yThanks! Yes that would work, just like an .html file would work. The advantages of SVG in this case are- the OS previews it as an image, but on click it opens a website (which to be fair, once you click on a downloaded file, you're already done)- SVGs are allowed in any "image/*" form, bypassing certain filters−lostmsu1yThat doesn't explain anything. Then what?
Comments
The Malwarebytes article[1] explains that the users downloaded (possibly automatically) the SVG files and then opened them in the default viewer, which is MS Edge.
[1] https://www.malwarebytes.com/blog/news/2025/08/adult-sites-t...
Thanks! Yes that would work, just like an .html file would work. The advantages of SVG in this case are
- the OS previews it as an image, but on click it opens a website (which to be fair, once you click on a downloaded file, you're already done)
- SVGs are allowed in any "image/*" form, bypassing certain filters
That doesn't explain anything. Then what?