Microsoft found a phishing campaign using ASCII smuggling, the invisible-character trick from AI prompt injection, to split words like funding.

A phishing campaign sent up to 2.37 million weekday emails using invisible Unicode tags to split financial lure words and bypass filters.

A once-overlooked block of unicode that's invisible to humans is gaining ever wider use.