---
title: Cybercriminals Use Invisible Characters to Bypass Email Security Filters
description: Cybercriminals use invisible Unicode in emails to bypass security, targeting users with fake password expiration alerts.
canonical_url: https://codekeeper.co/ticker/phishing-technique-invisible-unicode-emails
---

# Cybercriminals Use Invisible Characters to Bypass Email Security Filters

Cybercriminals use invisible Unicode in emails to bypass security, targeting users with fake password expiration alerts.

![Content Team](https://codekeeper.co/hubfs/_sized/Codekeeper_21_beeldmerkL-800.png)

By Content Team Oct 29, 2025

Share [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fphishing-technique-invisible-unicode-emails%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fphishing-technique-invisible-unicode-emails%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fphishing-technique-invisible-unicode-emails%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fphishing-technique-invisible-unicode-emails%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fphishing-technique-invisible-unicode-emails%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fphishing-technique-invisible-unicode-emails%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

ON THIS PAGE

### Want more insights like this?

Subscribe to our newsletter to get the latest software protection strategies delivered to your inbox.

By submitting your email, you consent to Codekeeper contacting you and agree to our [privacy policy](https://codekeeper.co/privacy-policy) .

Security researchers have uncovered a new phishing technique where cybercriminals embed invisible Unicode characters in email subject lines to evade automated security systems. The attackers use MIME encoding with soft hyphens to fragment trigger words like "password" while keeping them readable to humans. When viewed in email clients, subjects appear garbled in message lists but render normally when opened. The technique breaks up keywords that would typically alert security filters, allowing fake "password expiration" emails to reach inboxes. The Internet Storm Center discovered this method targeting credential theft through fake webmail login pages. The invisible characters effectively turn "password" into "p-a-s-s-w-o-r-d" at the code level, fooling detection systems while appearing normal to victims. **Source:** [Cybersecurity News](https://cybersecuritynews.com/new-phishing-attack-using-invisible-characters/)

Share this article [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fphishing-technique-invisible-unicode-emails%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fphishing-technique-invisible-unicode-emails%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fphishing-technique-invisible-unicode-emails%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fphishing-technique-invisible-unicode-emails%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fphishing-technique-invisible-unicode-emails%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fphishing-technique-invisible-unicode-emails%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

![blog_book_a_demo_cta_3x](https://codekeeper.co/hubfs/_sized/Codekeeper%202025/blog_book_a_demo_cta_3x-768x512.webp)

Have questions about protecting your software?

Our escrow experts are standing by to help.

[Book a free demo](https://codekeeper.co/book-a-demo)

YOU MAY ALSO LIKE

[Cyberattacks Trivy Compromise, Not LiteLLM, Drove Most of the March Supply Chain Exposure Aug 17, 2026](https://codekeeper.co/ticker/trivy-scanner-supply-chain-attack-impact)

[Vulnerabilities CISA Flags ScreenConnect Flaw Exploited Since August Sep 22, 2026](https://codekeeper.co/ticker/cisa-screenconnect-critical-flaw-exploitation)

[Supply Chain Attack Hits 32 Red Hat NPM Packages Aug 12, 2026](https://codekeeper.co/ticker/red-hat-npm-hack-malware-attack)

[South Staffs Water Hack Left Customers Dealing With Identity Theft and Broken Trust Aug 12, 2026](https://codekeeper.co/ticker/south-staffordshire-water-data-breach)