The Funding Email That Passed Every Filter By Being Invisible

This report describes a high-severity targeted financial phishing campaign that impersonated a lending firm and used invisible Unicode Tag characters (U+E0000 range) to obfuscate key strings from content filters; emails were delivered via ActiveCampaign with valid email authentication, used tracking redirects, and led to a malicious landing domain (IOCs and MITRE mappings provided).