A massive phishing campaign is using invisible Unicode tag characters to evade security filters, according to researchers at Microsoft. This technique, known as "ASCII smuggling," has grown popular over the past year for launching AI prompt injection attacks, but the same tactic can hide suspicious text in emails.
A massive phishing campaign is using invisible Unicode tag characters to evade security filters, according to researchers at Microsoft.
This technique, known as "ASCII smuggling," has grown popular over the past year for launching AI prompt injection attacks, but the same tactic can hide suspicious text in emails.
The page is ready to read now. The fuller skim-friendly version will appear here automatically.
A massive phishing campaign is using invisible Unicode tag characters to evade security filters, according to researchers at Microsoft. This technique, known as "ASCII smuggling," has grown popular over the past year for launching AI prompt injection attacks, but the same tactic can hide suspicious text in emails.
Open the app view to save this story, compare related coverage, and continue from the same source.