Creating Noise: The Emerging Obfuscation Technique Designed to Evade Email Security NLP Detection Capabilities

This report describes an emerging phishing obfuscation technique in which attackers append large quantities of benign text, legitimate links, and numerous HTML break lines to malicious emails to dilute NLP-based detection and potentially cause timeouts in scanning engines. Analysis of 40 attacks shows common use of Bank of America signatures and legitimate links (e.g., Uber.com, Bofa.com), targeting organizations in North America via Microsoft 365 and integrated cloud email security solutions; the report includes example emails, detection challenges, and defensive guidance emphasizing zero-trust and advanced detection.