Synapse Consulting - Lab Challenge #05 - Educational sample
===========================================================

  SYNAPSE LABS  |  EDUCATIONAL MATERIAL
  For education purposes only.

FILE:     northsea-invoice.svg   (SVG smuggling phishing sample)
SHA-256:  015847e0727863515d6e2064f1860db69afee186b12b20ebed7a69416483ca8c

WARNING - EDUCATIONAL USE ONLY
------------------------------
This SVG embeds an obfuscated <script> that would redirect a browser to a
credential-harvesting URL. It is SYNTHETIC: the final destination is a
non-resolvable .invalid domain (RFC 2606) and no real site is contacted.

  - Do NOT open it in a web browser. Analyse it in a TEXT EDITOR.
  - Work in an isolated VM.
  - Decode chain: extract the base64 blob -> base64 decode (outer) ->
    inner JS -> base64 decode the two atob() strings -> redirect URL + victim.

Tools: any text editor, base64, CyberChef (From Base64).
Full walkthrough: https://www.synapse-consulting.eu/labs/
