Adobe announced that it has released Snap.svg, a new open-source JavaScript library on GitHub.

So, I have an SVG graphic embedded in an html page.<BR><BR>within the svg are some mouseover events that do some re-drawing stuff.<BR><BR>Now I want the containing page to also make some updates ...

This attack is made through embedded SVG files containing JavaScript that reassemble a Base64 encoded QBot malware installer that is automatically downloaded through the target's browser.