曾被用作隐蔽提示词注入攻击的ASCII走私技术，如今已被垃圾邮件发送者所利用。1这一技术原本两年前因攻击AI代理而获得关注，现已演变成绕过电子邮件平台垃圾邮件过滤器的工具。1
ASCII走私技术的核心在于利用Unicode标签块进行编码。1该技术使用128个Unicode标签块，几乎完美镜像美国标准信息交换代码（ASCII），例如标签U+E0041可镜像字母"A"，U+E0061可镜像字母"a"。1通过这些标签编码恶意指令后，大型语言模型能够识别和执行这些指令，但人类读者几乎无法看到它们。1垃圾邮件发送者正是利用这一特性，让有害内容对电子邮件过滤系统和人工审核变得不可见，从而成功躲避检测和拦截。1
ASCII smuggling, a technique that gained prominence two years ago as a method for concealing prompt injection attacks against AI systems, has been adopted by spammers to circumvent email platform filtering mechanisms.1 The technique employs 128 Unicode tag blocks that closely mirror the American Standard Code for Information Interchange (ASCII) standard, allowing malicious instructions to be encoded in a way that large language models can detect while remaining nearly invisible to human readers.1
The mechanism works by rendering harmful directives as computer-readable characters obscured from human perception through special Unicode tags.1 For instance, the U+E0041 tag mirrors the letter "A," while U+E0061 corresponds to the lowercase "a."1 Spammers have now leveraged this obfuscation approach to evade the content filtering systems deployed by email providers, exploiting the gap between what automated systems and human recipients can perceive in messages.1
评论
还没有评论，欢迎留下第一条。