A new kind of pfishing gear
There is a new phishing file type in town: the Scalable Vector Graphics file, or .svg
An email arrived in the parish office inbox looking like an automatic to-do list reminder from (maybe) my own email calendar/task list. It's the kind of thing that might legitimately arrive- except I haven't set up my to-do list to email me reminders. It looked reasonably convincing:
From: admin@stphilipvictoria.ca <admin@stphilipvictoria.ca>
Sent: Wednesday, May 7, 2025 8:59 AM
To: St. Philip Anglican Church <admin@stphilipvictoria.ca>
Subject: Reminder - 5/7/2025 To Do
The attachment was ToDoList.svg
Above all, this message didn't include any of the common sketchy text errors to detect, since there was no message at all. But I wasn't expecting that .svg file extension: when in doubt, look it up. And don't open the attachments!
More about .svg files https://news.sophos.com/en-us/2025/02/05/svg-phishing/
More about recognizing spam and phishing emails: https://www.stphilipvictoria.ca/news/phishing