Tech

2029 readers

46 users here now

A community for high quality news and discussion around technological advancements and changes

Things that fit:

New tech releases
Major tech changes
Major milestones for tech
Major tech news such as data breaches, discontinuation

Things that don't fit

Minor app updates
Government legislation
Company news
Opinion pieces

Community Wiki

founded 2 years ago

MODERATORS

Vacant@programming.dev

Malware found hidden in image files, can dodge antivirus detection entirely — VirusTotal discovers undetected SVG phishing campaign (www.tomshardware.com)

submitted 4 weeks ago by throws_lemy@lemmy.nz to c/tech@programming.dev

16 comments fedilink hide all child comments

Scalable vector graphics (.svg) files are lightweight, XML-based images that render at any resolution. They’re usually harmless, but they can also contain active code, and hackers appear to be relying on them more often as a means to stealthily deliver malware.

you are viewing a single comment's thread
view the rest of the comments

[–] ISO@lemmy.zip 3 points 3 weeks ago (1 children)

resvg/usvg is a good implementation if you're looking for one.

[–] ulterno@programming.dev 1 points 3 weeks ago

Nice.
Perhaps would be useful for someone making a Lemmy Client.

My thoughts were more in the lines of:

Firefox probably supports the JS in SVG
I would expect Inkscape to not execute the JS, but let it be when edited and saved.
For normal viewers on the desktop, I'd expect JS to be fully ignored.