Cyber criminals are adapting ASCII smuggling for mass phishing campaigns

Microsoft has warned that ASCII smuggling, the use of invisible Unicode characters to trick AI models, is now being used by cyber criminals to supercharge phishing campaigns. Over the past year, ASCII smuggling has become a recurring technique for prompt injection and cross-prompt injection (XPIA), allowing an attacker to hide instructions inside...