Microsoft Exposes Sneaky Unicode Trick Hiding In Millions Of Emails
Keyword smuggling, which is the practice of obfuscating spam keywords to bypass detection filters, has been common practice for quite some time. Microsoft is warning that this traditional tactic has been enhanced by a new-school method of ASCII smuggling, which was originally used for AI prompt injection attacks. Now, ASCII smuggling is also being used to perform keyword smuggling by stuffing an empty ASCII tag into words known to flag detection systems.
This ASCII smuggling campaign seemed to start around February 2nd, when between 5 and 20 thousand spam emails using the technique were detected by Microsoft. The volume rapidly jumped up to 1.32 million on February 8th, increased to a peak of 2.37 million on February 11th, and maintained high levels until February 14th. There, it briefly peters off as low as 14 thousand before shooting back up to 1.5 million. Following that activity, a continuous wave of on-and-off...
Copyright of this story solely belongs to hothardware.com. To see the full text click HERE
