GoKawiilMicrosoft finds spammers hijacking AI-targeted ASCII smuggling to dodge email filters
Microsoft says spammers have repurposed ASCII smuggling, a technique once used mainly to sneak hidden prompt-injection instructions into AI systems, to disguise spam keywords and slip past Office 365 filters. The company detected daily signature hits jump from about 21,000 to over 1.3 million in early February, reaching 2.5 million within days before tapering off by mid-May.
GoKawiil's interpretation of the reporting above, not reported fact.
This shows a security trick born from AI research quickly migrating into ordinary cybercrime, proving that defenses built for one threat class can be repurposed against unrelated systems like spam filters. It also highlights a shared weakness across text-processing systems: invisible Unicode tag characters that machines read but humans cannot see, which could keep resurfacing in new forms of abuse.
- ASCII smuggling uses invisible Unicode tag characters to hide text from human readers while machines still process it.
- Originally used to sneak prompt injections into AI systems, it's now used to hide spam keywords from email filters.
- Microsoft recorded detections spiking from 21,000 to 2.5 million per day before declining by mid-May.
Not with a Bug, But with a Sticker" by Ram Shankar Siva Kumar & Hyrum Anderson — If tricks like ASCII smuggling and prompt injection fascinate you, this book digs into how machine learning systems get fooled and why defenses lag behind attackers. It's written by security researchers who've worked on real-world adversarial AI, making it a great companion to headlines about spammers borrowing AI attack techniques.
See Not with a Bug, But with a Sticker" by Ram Shankar Siva Kumar & Hyrum Anderson on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: arstechnica.com, 2026-09-04
Published there as: “Once popular for attacking AI, ASCII smuggling is embraced by spammers”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.