Researchers have discovered a new hacking campaign leveraging on Facebook Messenger to spread the Locky ransomware via SVG images. The Locky Ransomware is spread via a downloader, experts noticed that it is able to bypass Facebook defense measures by pretending to be a harmless image file. In May 2015, researchers at the AppRiver security firm discovered a malicious campaign that was distributing a strain of ransomware by exploiting a small JavaScript entry in the SVG files that allow them to redirect victims to a website used to serve the Cryptowall malware.”]
Source: https://securityaffairs.co/wordpress/53650/malware/svg-images-locky.html