An AI hacking trick is now being used to split the word ‘funding’ in spam

Microsoft Security Research discovered a spam campaign that used invisible Unicode tag characters (U+E0000-U+E007F) to split the word “funding” into “fun<invisible>ding,” evading keyword filters and token-based ML classifiers. The campaign sent up to 2.4 million messages per weekday before Microsoft’s hunting signature, which flags these rare tag characters, reduced deliveries by over 80% and ultimately halted the operation.