Dan Goodin writes that ASCII smuggling, a technique once primarily used to hide malicious prompt injections from Large Language Models (LLMs), has been adopted by spammers to evade email filters. By using invisible Unicode tags that mimic the structure of standard text, attackers can bypass machine learning-based spam detectors and natural language processing models without alerting human readers. This method allows words like "funding" or "credit" to be broken into non-standard tokens that escape keyword detection while remaining perfectly readable to a person once rendered in an email client.
- ASCII smuggling uses the Unicode Tags block, which contains 128 characters designed to be invisible to humans but readable by computers.
- Microsoft observed spam signatures using this technique spike from 21,000 per day to over 2.5 million within a four-day period in early February.
- The method is effective against modern AI-driven filters because it disrupts the way tokenizers process words into sub-word pieces.
- While originally used for stealthy prompt injections, spammers now use it specifically to obfuscate financial keywords from automated detectors.
- ASCII smuggling uses the Unicode Tags block, which contains 128 characters designed to be invisible to humans but readable by computers.
- Microsoft observed spam signatures using this technique spike from 21,000 per day to over 2.5 million within a four-day period in early February.
- The method is effective against modern AI-driven filters because it disrupts the way tokenizers process words into sub-word pieces.
- While originally used for stealthy prompt injections, spammers now use it specifically to obfuscate financial keywords from automated detectors.
