ASCII smuggling, a technique originally developed to hide malicious prompts for AI prompt injection attacks, has been repurposed by spammers to bypass email filters designed to detect mass spam. The method, which gained attention two years ago, uses special Unicode tags to embed instructions within emails. These tags encode characters that are readable by computers but nearly invisible to humans, allowing large language models (LLMs) to process the instructions while human readers remain unaware. This shift from AI attacks to spam campaigns highlights the adaptability of the technique.
ASCII Smuggling Technique Now Used for Spam
A clever technique once used to hide malicious prompts for attacking AI agents has been adopted by spammers to bypass email platform filters designed to flag mass spam campaigns. Known as ASCII smuggling, the method gained attention two years ago for making "prompt injection" AI attacks more stealthy.
How It Works
The technique works by embedding malicious instructions within emails or other untrusted content processed by large language models (LLMs) through a series of special Unicode tags. These tags encode characters that are readable by computers but nearly invisible to human eyes. As a result, an LLM can detect the hidden instructions while a human reading the email remains unaware.
Source: Ars Technica
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
