ASCII smuggling crosses over from AI prompt injection to phishing evasion

Reported 03 Sep 2026 by otx · Severity: medium

Microsoft researchers identified a high-volume phishing campaign utilizing invisible Unicode tag characters (U+E0000 to U+E007F), a technique originally associated with AI prompt injection research known as ASCII Smuggling. The attackers inserted these invisible characters into f