Skip to content
ATR-2026-00086highPrompt Injectiondraft

Visual Spoofing via RTL Override, Punycode, and Homoglyph Injection

Detects injection attempts that use visual spoofing techniques including Right-to-Left (RTL) override characters, Punycode-encoded domains, and CJK or Cyrillic homoglyph substitution to disguise malicious payloads as benign text or trusted domain references.

Severity
high
Category
Prompt Injection
Scan Target
mcp
Author
ATR Community (MiroFish Predicted)

Response Actions

block inputalertescalatesnapshot

References

MITRE ATLAS
AML.T0051