68
Adult sites are stashing exploit code inside racy .svg files (arstechnica.com)
submitted 1 year ago by to c/privacy@lemmy.dbzer0.com
25 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 9 points 1 year ago (1 child)

Opening the SVG file opens an empty Edge tab titled Process Monitor. This happens because SVG files on Windows are opened by Edge, even if the user has another browser set as their default.

https://www.malwarebytes.com/blog/news/2025/08/adult-sites-trick-users-into-liking-facebook-posts-using-a-clickjack-trojan

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 1 year ago

    that does not explain how does it happen when the svg appears on a page in firefox. firefox won't try to open all embedded assets with the default file handler in the OS, it will directly use its built in tools to handle it.

  • permalink
  • fedilink
  • source
  • parent