Table of Contents
Introduction
Microsoft is alerting of a "high-volume phishing campaign" that's using invisible Unicode tag characters to bypass email filters. The campaign has sent millions of emails using a technique known as ASCII smuggling to evade detection.
The attackers insert invisible characters inside common financial keywords like "funding" to split them apart (e.g., "fun⟨U+E0020⟩ding"), making the emails appear completely normal to recipients while successfully bypassing email security controls looking for keyword matches.
"Instead of using these characters to hide instructions from people while exposing them to AI models, the attacker used them to split financial lure words such as 'funding' to prevent email filters from parsing them." — Microsoft Security Research
What Is ASCII Smuggling?
ASCII Smuggling refers to a technique where invisible or non-rendering Unicode characters are used to conceal messages or instructions inside seemingly-harmless text. Human user interfaces do not render them, making the text appear completely normal to the user.
However, such content can be ingested by email filters or AI language models, mistakenly treating it as real text. This opens the door to prompt injection attacks by taking advantage of the fact that large language models (LLMs) cannot draw a reliable boundary between genuine user instructions and content embedded into benign-looking text.
"The most abused range is the Unicode Tags block, U+E0000 to U+E007F. This block contains a shadow copy of the printable ASCII characters (for example, U+E0041 mirrors 'A,' U+E0061 mirrors 'a'). The block was originally intended for language tagging and is now largely deprecated." — Microsoft
How the Attack Works
The phishing campaign leverages invisible Unicode tag characters as an obfuscation pattern, inserting them inside common financial keywords to split them apart and bypass email filters.
Example:
- A finance-related lure term such as "funding" becomes "fun⟨U+E0020⟩ding"
- To a recipient, and to parsing pipelines that drop or normalize these characters, the word still reads as "funding"
- To a detector matching the literal string "funding," the byte sequence no longer contains the contiguous keyword
"To a detector matching the literal string funding, or a regex that does not account for interleaved invisible code points, the byte sequence no longer contains the contiguous keyword." — Microsoft
Campaign Scale — Millions of Emails
The campaign has been operating at a massive scale:
- First emerged — early February 2026
- High-volume phase — roughly three months (February to May 2026)
- Weekly cadence — almost silent on weekends, resuming in full swing on Mondays
- Daily volume — 1 to 2.37 million messages per day
- Peak day — February 26, 2026 (highest volume)
- Declined sharply — after May 15, 2026
The campaign is assessed to be tied to a broader phishing campaign that weaponized the ActiveCampaign marketing and automation platform to distribute thousands of AI-generated phishing emails targeting Small Business Administration (SBA) loan applicants.
Sender Domains Used in the Campaign
The campaign leverages hundreds of disposable, finance-themed sender domains using lures that mimicked business loan, line-of-credit, and advance-funding phishing patterns.
Top 10 sender domains by volume:
- guardiangrowthfunding[.]com
- digitalcapitalboost[.]com
- thebusinessloanexpress[.]com
- yourlocfunding[.]com
- advancefundingboost[.]com
- guardiancapitalway[.]com
- harboradvancefunding[.]com
- unitedfundingwave[.]com
- directcapitalboost[.]com
- onlinedirectfinance[.]com
These domains are designed to appear legitimate and trustworthy, making the phishing emails more convincing to recipients.
ActiveCampaign's Role in the Attack
The phishing emails are relayed through ActiveCampaign, a legitimate marketing and automation platform. This causes every outbound link in the message body to be routed via its own click-tracking domains:
- acemlnd[.]com
- activehosted[.]com
Why this matters:
- Emails from a reputable marketing platform with established IP reputation appear more legitimate
- Authentication signals (SPF, DKIM, DMARC) may look valid
- Reputation-based filtering becomes more complicated
"By originating from a reputable marketing platform with established IP reputation and authentication, the activity may appear more similar to legitimate marketing traffic and can complicate reputation-based filtering." — Microsoft
ActiveCampaign's response:
- Tested its content-moderation systems with messages containing invisible Unicode characters
- Such emails receive the same moderation verdict as their unobfuscated equivalents
- Heavy use of the technique is treated as a "suspicious signal"
Why This Is Dangerous for Businesses
This campaign demonstrates several concerning trends:
- AI-era evasion techniques are being adapted for traditional phishing and spam campaigns
- Legitimate marketing platforms are being weaponized to bypass reputation-based filtering
- Invisible characters make detection difficult for traditional email security tools
- Scale — millions of emails can bypass filters daily
- Targeting — SBA loan applicants and businesses are primary targets
- Data collection — attackers collect detailed business and financial information for future spear-phishing attacks
The campaign's sophistication lies in the ability to mass-produce convincing, tailored websites that adapt to different illegitimate or impersonated domains. Attackers are able to scale sophisticated phishing by using AI-powered marketing automation features.
How to Protect Your Business
Steps to protect your organization from ASCII smuggling and similar attacks:
1. Update Email Security Filters
- Ensure your email security solution can detect and normalize Unicode tag characters
- Look for solutions that strip or flag invisible Unicode characters
- Configure filters to detect obfuscated keywords
2. Train Employees
- Educate staff about the existence of invisible character attacks
- Encourage caution with emails that appear slightly "off" even if they look normal
- Teach employees to verify sender identity before clicking links
3. Implement Advanced Threat Protection
- Use AI-powered email security solutions that can detect obfuscation patterns
- Implement sandboxing for suspicious attachments and links
- Enable URL protection and click-time analysis
4. Monitor Email Headers
- Watch for emails from finance-themed domains that may be disposable
- Be cautious of emails routed through third-party tracking services
- Review authentication results (SPF, DKIM, DMARC) — but don't rely on them alone
5. Use Anti-Phishing Training
- Simulate phishing campaigns that include obfuscated content
- Test employees' ability to spot suspicious emails
- Provide regular security awareness training
Taking these steps can significantly reduce your organization's risk from advanced phishing campaigns using ASCII smuggling and similar techniques.
Final Thoughts
The ASCII smuggling phishing campaign is a significant evolution in phishing techniques, demonstrating how attackers are adapting AI-era evasion methods to traditional email attacks. The use of invisible Unicode characters to split keywords and bypass filters represents a new challenge for email security teams.
Key takeaways:
- Millions of emails sent using invisible Unicode tag characters
- ASCII smuggling splits keywords to bypass email filters
- Legitimate platforms (ActiveCampaign) weaponized for delivery
- Finance-themed lures targeting SBA loan applicants and businesses
- AI-powered automation enables scale and personalization
- Traditional email security may not detect these obfuscated messages
- Human vigilance and advanced threat protection are essential
If your business needs assistance with email security, threat protection, or phishing defense, contact SystemLogicIT for expert guidance.