AI Spam Filters Fooled by Old-School Text Salting Techniques
Cyber attackers bypass email filters using hidden text manipulation methods, reveals Barracuda research.
1What is Text Salting?
Attackers add random benign words to malicious emails to deceive AI filters, making scanning systems perceive messages as normal. Barracuda detected over 1 million phishing attacks using this method since April 2023.
2Digital Adaptation of Traditional Tactics
Text salting isn't new—it's bypassed traditional email security for years. Now machine learning and LLM-based tools are also vulnerable. Attackers primarily use three variation techniques to hide their tracks from automated scanners.
3How Concealment Techniques Work
CSS cropping shrinks the visible window to hide filler text. Text manipulation moves suspicious content off-screen. Zero-font techniques insert machine-readable but human-invisible misleading words between phishing content.
4Why AI Systems Are Vulnerable
LLMs typically process email text and source code plainly without understanding visibility context. Barracuda notes these systems can be trained for detection, but most tools don't incorporate this capability by default.
5Enterprise Protection Strategies
Barracuda recommends layered email security: checking sender reputation, authentication results, embedded URLs, and HTML rendering differences instead of relying solely on keyword detection. Removing AI spam filters entirely may be considered.
6The Need for Continuous Adaptation
These attacks demonstrate that technological advancements alone aren't sufficient. Organizations must continuously update security strategies with multi-layered defenses. Current AI solutions lack human-level contextual understanding for reliable detection.