logo

Peek-A-Boo! 🫣 Emoji Smuggling and Modern LLMs – FireTail Blog

ID: e95a3404-e6a7-5e14-879e-8bbd14e9e06d

STIX ID: report--e95a3404-e6a7-5e14-879e-8bbd14e9e06d

Feed Name: Security Boulevard

Threat Score
70/100

Date Published: 2026-01-09

Date Updated: 2026-04-22

Author: FireTail - AI and API Security Blog

...
...

This research describes an "emoji smuggling" technique that embeds hidden UTF‑8/Unicode payloads inside emoji (using variation selectors and invisible characters) to evade human review and LLM safety filters; researchers demonstrated a PoC on an LLM (Gemini), showed how a decoding key unlocks hidden commands, and recommend monitoring raw byte sequences of inputs as the primary mitigation.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.