Since April, over one million phishing emails have used hidden text techniques to evade AI-powered and traditional email security filters, according to Barracuda Networks researchers. Attackers manipulate email HTML by embedding invisible benign text alongside malicious content, confusing security gateways that primarily analyze machine-readable data rather than visual email presentation. Large language models (LLMs) accelerate attackers’ ability to generate and layer such obfuscation tactics, while current AI-based defenses struggle to detect the full malicious context behind these salted messages.
https://www.darkreading.com/threat-intelligence/1m-emails-hidden-text-dupe-ai-security-filters