TGViewer
CTT Report Hub CTT Report Hub @aptreports · 3.52K subscribers
Post #32124 77
#ParsedReport #CompletenessLow
03-09-2026

ASCII smuggling crosses over from AI prompt injection to phishing evasion

https://www.microsoft.com/en-us/security/blog/2026/09/03/ascii-smuggling-crosses-over-from-ai-prompt-injection-to-phishing-evasion/

Report completeness: Low

Threats:
Smuggling_technique
Shadow_copies_delete_technique
Cross_prompt_injection_technique
Js-smuggler
Homoglyph_technique
Credential_harvesting_technique

Victims:
Financial sector, Businesses

TTPs:
Tactics: 1
Technics: 2

ChatGPT TTPs:
do not use without manual check
T1027, T1566, T1566.002

IOCs:
Domain: 20

Soft:
Microsoft Defender, Office 365

Algorithms:
exhibit

Win API:
T0068

Languages:
swift
Microsoft News ASCII smuggling crosses over from AI prompt injection to phishing evasion Invisible Unicode characters popularized for hiding instructions from AI models are now being used to obfuscate words before email filters parse them.
More from @aptreports
  1. Oct 11, 2026#ParsedReport #ChatGPT #Translated Autotext: (TI Report Analyser + ChatGPT + Auto Translat…
  2. Oct 11, 2026#ParsedReport #GeneratedSchema Generated with GPT-4
  3. Oct 11, 2026#ParsedReport #CompletenessLow 08-10-2026 Making sure the checks get printed https://blog.…
  4. Oct 11, 2026#ParsedReport #ChatGPT #Translated Autotext: (TI Report Analyser + ChatGPT + Auto Translat…
  5. Oct 11, 2026#ParsedReport #GeneratedSchema Generated with GPT-4
  6. Oct 11, 2026#ParsedReport #CompletenessHigh 08-10-2026 The phone was compromised before the user turne…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →