Attackers conceal phishing lures using invisible Unicode characters

Attackers use invisible Unicode characters to split finance words like "funding" and evade email filters. Microsoft found a campaign peaking at 2.37 million daily messages in late February, using 148 finance-themed domains. Defender caught over 99% via other signals.