Cybercriminals use emojis to evade detection, Flashpoint warns

Cybercriminals are employing emojis to bypass security filters and evade detection, according to a new report from threat intelligence experts at Flashpoint. Threat actors are substituting emojis for keywords related to fraud, financial activities, and specific services, making their communications harder to monitor. This tactic complicates large-scale monitoring efforts by security professionals, Tech Radar reports.

Flashpoint's report categorizes the emojis used by cybercriminals into several groups, including financial activity, access credentials, tools, automation, services, targets, geography, and urgency. Emojis like 💳 and 🏦 can replace terms such as "credit card" and "bank," respectively, to circumvent basic keyword filters. Other symbols like 💰 and 💸 may indicate profit or successful fraud, while 🔑 and 🔓 are used for credentials and account access. Emojis such as 🤖 and ⚙️ are employed to represent malware and tools. The use of emojis also aids in cross-regional and multilingual communication within the cybercriminal community.

Source: Tech Radar