Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters

Microsoft has identified a large-scale phishing campaign that utilizes invisible Unicode tag characters to bypass email filters. Attackers embed these characters within financial keywords, splitting them to evade detection while appearing normal to recipients. This technique, dubbed ASCII smuggling, was used in millions of emails over several months, often masquerading as business loan or funding opportunities.