Seemingly harmless SVGs are packed with malicious JavaScript for a phishing redirect to actor-controlled URLs.

Pure Javascript lightbox with mobile support. It can handle images, videos with autoplay, inline content and iframes - biati-digital/glightbox ...