行业动态
arstechnica.com ·
@Dan Goodin
曾是AI攻击手段的ASCII走私现被垃圾邮件广泛利用
ASCII走私技术利用肉眼不可见的Unicode字符（如零宽空格）隐藏文字，此前曾被研究用于绕过AI安全防护，如今却被垃圾邮件发送者采纳，成为逃避内容过滤的常用手段。这种现象表明该技术正从针对AI的攻击向量演变为广泛的垃圾邮件工具。
AI推荐理由 该案例显示AI安全研究中的攻击手法正被现实垃圾邮件生态快速利用，对AI驱动的邮件过滤和内容审核带来成本上升压力。AI从业者需将不可见字符归一化纳入预处理流程，并持续监测对抗性编码的迁移。
76
正文
一种用于在针对 AI 智能体的攻击中隐藏恶意提示的巧妙技术，已被垃圾邮件发送者采用，以逃避电子邮件平台上旨在标记群发活动中不需要消息的过滤器。该技术被广泛称为 ASCII 走私。两年前，它作为一种使一类称为提示注入的 AI 攻击更加隐蔽的手段而受到关注。嵌入在电子邮件或其他非可信内容中供 LLM 处理的恶意指令并非以普通文本编写。相反，它们由特殊范围的 Unicode 标签呈现。例如，标签点 U+E0041 镜像“A”，U+E0061 镜像“a”。不再仅仅用于隐藏提示注入 这 128 个标签的块几乎完美地模仿了美国信息交换标准代码的一部分，但有一个主要区别：它们编码的字符计算机可读，但设计上几乎完全对人类不可见。通过用这些标签表达恶意提示，LLM 检测到指令，但阅读电子邮件的人永远不会看到它们。关于 ASCII 走私的更多信息请点击此处。阅读完整文章 评论
查看原文（中文正文为 AI 翻译）
A clever technique used to hide malicious prompts in attacks on AI agents has been adopted by spammers to evade filters on email platforms that are designed to flag unwanted messages used in mass campaigns. The technique is broadly known as ASCII smuggling. It gained attention two years ago as a means of making a class of AI attack known as prompt injections more stealthy. Malicious instructions embedded in emails or other untrusted content to be processed by an LLM aren’t written in ordinary text. Instead, they’re rendered by a special range of Unicode tags. For example, the tag point U+E0041 mirrors “A,” and U+E0061 mirrors “a.” No longer just for obscuring prompt injections The block of 128 tags mimics a portion of the American Standard Code for Information Interchange almost perfectly, with one major difference: the characters they encode are readable by computers but, by design, are almost completely invisible to humans. By expressing the malicious prompts in these tags, LLMs detect the instructions, but people reading the email never see them. There’s much more about ASCII smuggling here. Read full article Comments