Phishing expands ASCII smuggling beyond AI
Microsoft finds invisible Unicode tags used to hide financial-lure words in a massive email phishing campaign.
Fraudsters have found a new use for ASCII smuggling, typically used to hide malicious prompts intended for AI models, in an old-school attack method: email phishing. Microsoft uncovered a massive phishing campaign using invisible Unicode tag characters that peaked at more than 2.37 million messages in late February, remained elevated during weekdays over the next three months, and gradually declined by mid-June.
Sources
- The Register Original source
Continue Reading
Cyber CrimeNewPolymarket breach exposes supply-chain risk
A hijacked third-party script let attackers drain 726 Polymarket wallets, prompting about $3.9 million in refunds and a review of script trust.
Cyber CrimeNorthflank breach exposes AI key theft risk
Cloud platform Northflank told customers to rotate all secrets after a breach led to unauthorized use of AI API keys stored on its systems.
Cyber CrimeSyrian Hacker Sentenced After 12 Years
Ahmad Umar Agha, tied to the Syrian Electronic Army, was sentenced to 42 months in the US more than 12 years after he was first charged.