![\"\"](\"https:\/\/dtasiagroup.com\/wp-content\/uploads\/2025\/11\/Phishing-Emails-Small-Font-Size.webp\")
<\/p>\n<\/p>\n
A recent phishing campaign has been identified using invisible characters<\/strong> to sneak past email security filters, according to Jan Kopriva from the SANS Internet Storm Center.<\/p>\n The attackers insert soft hyphens<\/strong> into the subject line\u2014specifically in the phrase \u201cYour Password is About to Expire.\u201d<\/em> While these characters disrupt keyword-based detection in security tools, they remain invisible to most email clients. To users, the subject line appears completely normal.<\/p>\n Kopriva explains that although soft hyphens are not technically invisible, \u201cOutlook as well as most other e-mail clients don\u2019t render them as visible text in most cases.\u201d By combining these characters with the technique of splitting the subject into multiple MIME-encoded words, the attackers are intentionally trying to evade automated filters designed to catch malicious messages.<\/p>\n The body of the email is also packed with hidden soft hyphens. Humans will read a typical password-reset prompt, but security systems see text broken apart by invisible characters\u2014making detection much more difficult.<\/p>\n Kopriva notes that while the use of invisible characters in phishing emails is fairly common, \u201cit is quite unusual to see it also applied to the subject of a message.\u201d<\/p>\n If a user clicks the link inside the email, they\u2019re redirected to a fake login page created to harvest their credentials.<\/p>\n This campaign highlights how attackers constantly evolve their tactics to bypass defenses and target users directly. AI-powered security awareness training<\/strong> can help organizations build resilience against these threats. KnowBe4 equips employees to recognize and avoid social engineering attacks, helping more than 70,000 organizations worldwide strengthen their security culture and reduce human risk.<\/p>\n \n About DT Asia<\/strong><\/p>\n DT Asia began in 2007 with a clear mission to build the market entry for various pioneering IT security solutions from the US, Europe and Israel.<\/p>\n Today, DT Asia is a regional, value-added distributor of cybersecurity solutions providing cutting-edge technologies to key government organisations and top private sector clients including global banks and Fortune 500 companies. We have offices and partners around the Asia Pacific to better understand the markets and deliver localised solutions.<\/p>\n \u00a0<\/strong><\/p>\n How we help<\/strong><\/p>\n If you need to know more about Phishing Emails Use Invisible Hyphens to Avoid Detection, you\u2019re in the right place, we\u2019re here to help! DTA is Quest Software\u2019s distributor, especially in Singapore and Asia, our technicians have deep experience on the product and relevant technologies you can always trust, we provide this product\u2019s turnkey solutions, including consultation, deployment, and maintenance service.<\/p>\n