JavaScript Inside Attachment

[koby]

Hello Guys ,
One of my client got an SVG file as attachment with Phishing JavaSctipt inside of it , Please take a look...

"
<?xml version="1.0" ?>
<svg xmlns="http://www.w3.org/2000/svg">
<circle></circle>
<script type="text/javascript">
window.location.href = "hxxps://pub-7aceed01dfe3486284b7dd9f9aa80ac5.r2.dev/bank.svg";
</script>
</svg>
"

Who can I block it base on rules

Best Regards ,
Koby Peleg Hen