Barracuda: AI-Era "Text Salting" Phishing Attacks Surge

Barracuda warns that phishing attacks using "text salting" are sharply increasing. This technique hides large amounts of benign text within emails, making them effective against both traditional and AI-powered security systems. Barracuda identified over one million such attacks. Attackers use this method to dilute suspicious keywords or break up known phishing phrases. For example, they might insert invisible text into phrases like "Your password expired" to bypass scanners. The hidden content can include random stories or notes, designed to outweigh high-risk terms. What's interesting is that generative AI allows attackers to quickly create unique, realistic-looking text. This confuses machine learning models and large language model-based email security systems. Barracuda notes that AI models often evaluate all email content equally, making them vulnerable to this manipulation. The bottom line is that organizations need layered email security and ongoing employee training to combat these evolving threats.