Phishing attack hides JavaScript using invisible Unicode trick
JavaScript developer Martin Kleppe first disclosed the obfuscation technique in October 2024[…] Each ASCII character in the JavaScript payload is converted into an 8-bit binary representation, and the binary values (ones and zeros) in it are replaced with invisible Hangul characters.