AsyncRAT spread through malicious SVG files imitating web portals

TLDR; attacker uses SVG format to trick user into dow loading and executing a malcious file that is hosted within the SVG file itself.

the recommendation is to not download and run executable files