This is sneaky because there’s exploit code that’s now runnable in your browser, but your anti-virus software won ... you can end up with a valid image (JPG or PNG) file that will nonetheless ...