Email Phishers Using A Simple Way to Bypass MS Office 365 Protection

(情報元のブックマーク数

ゼロサイズのフォントでゴミを入れてスパムフィルタを回避する手段らしい

Security researchers have been warning about a simple technique that cyber criminals and email scammers are using in the wild to bypass most AI-powered phishing detection mechanisms implemented by widely used email services and web security scanners. Dubbed ZeroFont, the technique involves inserting hidden words with a font size of zero within the actual content of a phishing email, keeping its visual appearance same, but at the same time, making it non-malicious in the eyes of email security scanners.

Email Phishers Using A Simple Way to Bypass MS Office 365 Protection

screenshot