Security News > 2025 > February > Phishing attack hides JavaScript using invisible Unicode trick

Phishing attack hides JavaScript using invisible Unicode trick

2025-02-19 20:14

A new JavaScript obfuscation method utilizing invisible Unicode characters to represent binary values is being actively abused in phishing attacks targeting affiliates of an American political action committee (PAC). [...]

News URL

https://www.bleepingcomputer.com/news/security/phishing-attack-hides-javascript-using-invisible-unicode-trick/

#attack #javascript #phishing

Related news

Darktrace: 96% of Phishing Attacks in 2024 Exploited Trusted Domains Including SharePoint & Zoom Docs (source)
FatalRAT Phishing Attacks Target APAC Industries Using Chinese Cloud Services (source)
Hackers Exploit AWS Misconfigurations to Launch Phishing Attacks via SES and WorkMail (source)
YouTube warns of AI-generated video of its CEO used in phishing attacks (source)
Ukrainian military targeted in new Signal spear-phishing attacks (source)
Phishing platform 'Lucid' behind wave of iOS, Android SMS attacks (source)
iOS devices face twice the phishing attacks of Android (source)

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.