
- Hackers use AI tools to hide phishing code in SVG files disguised as business charts
- Malicious SVGs encoded payloads using business terms, decoded by hidden scripts to steal data
- Microsoft attributes the complex obfuscation to AI-generated code, not typical human-written malware
We’ve all heard of Gen AI being used to craft bodies of convincing phishing emails, however Microsoft researchers have now discovered a campaign in which threat actors took AI use in phishing a step further - to better hide malicious code in plain sight.