Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters

Microsoft warns of a large phishing campaign using invisible Unicode tag characters to evade email filters by splitting key words. The campaign peaked in early 2026, sending up to 2.37 million messages per weekday, targeting SBA loan applicants with AI-generated emails.