Phishing Campaign Exploits Invisible Unicode Characters to Bypass Email Filters

A high-volume phishing campaign uses invisible Unicode tag characters to split financial keywords, evading email filters and AI detection. The attack leverages ActiveCampaign's platform to distribute AI-generated emails, targeting SBA loan applicants with scalable, tailored phishing schemes.

Microsoft is alerting of a "high-volume phishing campaign" that's using invisible Unicode tag characters to bypass email filters.

"Instead of using these characters to hide instructions from people while exposing them to AI models, the attacker used them to split financial lure words such as 'funding' to prevent email filters from parsing them," the Microsoft Security Research team said.

The

Read original article