SVG Smuggling Drives Two-Month Voicemail Phishing Wave

The most recent large-scale phishing campaigns are slipping past corporate email defenses by exploiting a file format many security systems are still learning to read. A two-month campaign that ran from June 1 to August 4, 2026, leveraged SVG attachments disguised as voicemail files to smuggle obfuscated JavaScript past security scanners, with email security vendor INKY detecting and flagging a total of 26,589 malicious messages across 5,527 organizations.

The lure inside the attachment

The phishing emails presented themselves as internal voicemail notifications, with 99.5% of the email subjects incorporating the local part of the recipient's own email address. This personalization was paired with attachments that used voicemail-style names and contained both SVG and XML content.

The attacker's clever trick centered on the MIME type declaration. The attachments declared a MIME type of text/plain rather than image/svg+xml. This meant that security scanners which focus on the stated MIME type would see an innocuous text file rather than active, executable content.

SVG files can contain JavaScript, and in the samples analyzed by INKY, a minimal graphic shell concealed obfuscated script that reconstructed strings at runtime and fetched a remote endpoint. The code also used deferred execution and runtime script injection, making its behavior difficult to identify through static inspection alone.

Spray and pray approach

It wasn't a targeted spear-phishing operation. The largest spike occurred on June 3 when 2,432 messages reached 1,149 organizations. The median organization received two messages during the campaign, while 32% received only one.

The ten most-affected organizations accounted for just 6% of the total volume, which is consistent with broad spray delivery rather than a tightly focused attack. According to INKY, the campaign was still running when its analysis closed.

Native spam scoring missed the mark

The campaign leaned heavily on internal spoofing, with 95% of messages claiming to come from the recipient's own domain while arriving from an external sender that had never authenticated to the organization's mail server.

Native spam scoring treated most of the campaign as harmless. Some 19,994 messages (75%) received a Microsoft Spam Confidence Level (SCL) of 0 or 1, which Microsoft treats as not spam, while only 4,777 messages (18%) were assigned SCL 5. INKY noted that the campaign was built from a single template, yet the same message drew different native verdicts depending on the receiving mailbox.

Why the attack worked

The combination of several individually plausible signals made the phishing emails particularly effective. The familiar voicemail pretext, an image format that users often open without hesitation, recipient-specific personalization, and impersonation of an internal sender all contributed to the campaign's success.

The SVG attachment served as the bridge between these social-engineering elements and executable browser content, allowing the attackers to deliver their malicious payload while remaining hidden from traditional defenses.

Stopping the next wave

For security teams, this campaign serves as a reminder to not rely solely on native spam filters. The fact that the majority of messages evaded native detection and even received low spam confidence scores highlights the need for additional layers of protection. Training users to be cautious with unexpected voicemail notifications, even those that appear to come from within the organization, remains essential.

— This story was reported by Xploitwire based on original coverage from Infosecurity Magazine.