The Audio Player That Was Never an Image

A high-severity phishing campaign targeted four mailboxes at a commercial firm with emails that visually rendered a fake audio player using visible Unicode glyphs (Myanmar section signs, bullets and zero-width characters) rather than embedding any image or media; the lure displayed a bogus duration and linked through click-tracking to a free-tier hosting landing. Standard image/OCR/logo pipelines could not detect the deception because no image was present, authentication (SPF/DKIM/DMARC) passed, and analysts flagged the messages by link and sender behavior; the report lists IOCs (landing domain, URLs, tracking account IDs, IP, class names, and the exact displayed strings and code points) and recommends scoring message affordances (a playable UI with no corresponding asset) as an anomaly.