Attackers conceal phishing lures using invisible Unicode characters

September 4, 2026 · 3:57 pm 2 sources

Image: BleepingComputer

Coverage

Coverage

• Attackers conceal phishing lures using invisible Unicode characters
  BleepingComputer · September 6, 2026 14:23
  Threat actors have adopted the ASCII smuggling technique in phishing campaigns, using invisible Unicode characters to evade email security filters. [...]

More coverage

• Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters
  The Hacker News · September 4, 2026 15:57
  Microsoft is alerting of a "high-volume phishing campaign" that's using invisible Unicode tag characters to bypass email filters. "Instead of using these characters to hide instructions from people while exposing them to AI models, the attacker used them to split financial lure words such as…