OTX Threat: ASCII smuggling crosses over from AI prompt injection to phishing evasion
AI Summary
Microsoft researchers identified a high-volume phishing campaign utilizing invisible Unicode tag characters (U+E0000 to U+E007F), a technique originally associated with AI prompt injection research known as ASCII Smuggling. The attackers inserted these invisible characters into financial keywords like 'funding' to evade email filters rather than hiding instructions from users. The campaign began F Sectors: Finance
Discussion
Sign in to join the discussion.
Loading comments…