03-09-2026
ASCII smuggling crosses over from AI prompt injection to phishing evasion
https://www.microsoft.com/en-us/security/blog/2026/09/03/ascii-smuggling-crosses-over-from-ai-prompt-injection-to-phishing-evasion/
Report completeness: Low
Threats:
Smuggling_technique
Shadow_copies_delete_technique
Cross_prompt_injection_technique
Js-smuggler
Homoglyph_technique
Credential_harvesting_technique
Victims:
Financial sector, Businesses
TTPs:
Tactics: 1
Technics: 2
ChatGPT TTPs:
do not use without manual checkT1027, T1566, T1566.002
IOCs:
Domain: 20
Soft:
Microsoft Defender, Office 365
Algorithms:
exhibit
Win API:
T0068
Languages:
swift