Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters

Microsoft is warning about a large-scale phishing campaign that uses invisible Unicode characters to evade email filters. The attackers are using these characters to split up words related to financial topics, making it harder for filters to detect them. This tactic allows the phishing emails to bypass filters and reach their targets. The campaign is described as high-volume, sending out millions of emails. The use of invisible Unicode characters is a unique approach to evade detection, according to the Microsoft Security Research team. The team notes that the characters are being used to conceal instructions from email filters, rather than from human readers.