Unverified60% confidenceFactExact time
In 2021, researchers at the University of Cambridge named the attack that uses Unicode bidirectional control characters for visual deception the Trojan Source attack and demonstrated that mainstream compilers and interpreters including GCC, Clang, Python, and Rust are all affected.
2
Sources
60%
Confidence
Long-term
Relevance
7/7/2026
First Seen
Sources
The Interview Game in the AI Era: Where Does Human Expertise Still Matter?
bilibiliKoala聊开源7/3/2026
Related Claims
UnverifiedTrojan Source攻击由剑桥大学研究者Nicholas Boucher和Ross Anderson于2021年在ACM CCS上披露，被分配CVE-2021-42574编号，利用Unicode双向文本控制字符使代码在人眼阅读与编译器解析时呈现不同逻辑79% similarUnverifiedTrojan Source is a class of source code supply chain attack disclosed in 2021 that uses Unicode bidirectional control characters (such as U+202E) to make source code display in a different order than it is parsed, and the technique works equally well in natural language text.70% similarUnverifiedSince 2024, multimodal jailbreak attacks have begun to emerge, with attackers embedding malicious instructions in images or audio to bypass text-level safety detection.65% similarUnverifiedBy 2024, security researchers had demonstrated indirect prompt injection attacks that hijack RAG system outputs by embedding hidden instructions in web pages64% similarUnverifiedBetween 2023 and 2024, security researchers discovered malicious models on the Hugging Face platform multiple times, with attackers executing attacks by embedding malicious code in model serialization files.64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/140484API
curl https://kongchang.com/api/v1/knowledge/claims/140484MCP
get_claim(id=140484)