Sophos says the use of SVG files in phishing is on the rise SVG files bypass email protection ... In any case, opening the SVG file brings up a new browser tab, and in it a hyperlink.