Once popular for attacking AI, ASCII smuggling is embraced by spammers
摘要
ASCII走私技术最初用于隐藏针对AI代理的恶意提示，现已被垃圾邮件发送者采用，以规避邮件平台的反垃圾过滤。该技术利用一组特殊的Unicode标签，使恶意指令对计算机可读，但对人类几乎完全不可见。这一方法两年前因增强提示注入攻击的隐蔽性而受到关注，如今其应用范围已扩展至垃圾邮件领域。
A clever technique used to hide malicious prompts in attacks on AI agents has been adopted by spammers to evade filters on email platforms that are designed to flag unwanted messages used in mass campaigns.
The technique is broadly known as ASCII smuggling. It gained attention two years ago as a means of making a class of AI attack known as prompt injections more stealthy. Malicious instructions embedded in emails or other untrusted content to be processed by an LLM aren’t written in ordinary text. Instead, they’re rendered by a special range of Unicode tags. For example, the tag point U+E0041 mirrors “A,” and U+E0061 mirrors “a.”
No longer just for obscuring prompt injections
The block of 128 tags mimics a portion of the American Standard Code for Information Interchange almost perfectly, with one major difference: the characters they encode are readable by computers but, by design, are almost completely invisible to humans. By expressing the malicious prompts in these tags, LLMs detect the instructions, but people reading the email never see them. There’s much more about ASCII smuggling here.
转载信息
评论 (0)
暂无评论，来留下第一条评论吧