Once opened in a browser, the code decrypts a secondary payload using a static XOR key and then redirects the user to an ...

Seemingly harmless SVGs are packed with malicious JavaScript for a phishing redirect to actor-controlled URLs.

GLightbox is a pure javascript lightbox. It can display images, iframes, inline content and videos with optional autoplay for YouTube, Vimeo and even self hosted videos.