Attackers are increasingly sending phishing emails with SVG attachments that contain embedded HTML pages or JavaScript code.