ATR-2026-00086highPrompt Injectiondraft
Visual Spoofing via RTL Override, Punycode, and Homoglyph Injection
Detects injection attempts that use visual spoofing techniques including Right-to-Left (RTL) override characters, Punycode-encoded domains, and CJK or Cyrillic homoglyph substitution to disguise malicious payloads as benign text or trusted domain references.
Severity
high
Category
Prompt Injection
Scan Target
mcp
Author
ATR Community (MiroFish Predicted)
Response Actions
block inputalertescalatesnapshot
References
MITRE ATLAS
AML.T0051