An SVG attachment is a Scalable Vector Graphics file sent as an email attachment or downloaded from the web. Although SVG is often treated like a harmless image format, it is XML-based and can include active content such as JavaScript, links, and embedded resources. That makes it more flexible than a static picture and also more dangerous if a user opens it in a browser or application that executes its contents.
In cyber attacks, SVG attachments are used to bypass suspicion and deliver scriptable payloads through a file type many users trust. A phishing email may attach an SVG that appears to be a document preview or logo, but the embedded code can redirect the victim, launch a download, or stage further malware. Defenders look for unusual SVG use in email, scripts inside image files, and execution paths that start from a user-opened attachment rather than a normal application workflow.