Detection-Engineering on CuraSechttps://curasec.metacog.co.kr/tags/detection-engineering/Recent content in Detection-Engineering on CuraSecHugoen-usFri, 10 Jul 2026 09:49:54 -0500HTML phishing attachments use comment stuffing to evade AI detectionhttps://curasec.metacog.co.kr/insights/2026-07-10-comment-stuffing-in-an-html-phishing-attachment-as-a-mechani/Fri, 10 Jul 2026 09:49:54 -0500https://curasec.metacog.co.kr/insights/2026-07-10-comment-stuffing-in-an-html-phishing-attachment-as-a-mechani/<ul> <li><strong>Engineer — Learn:</strong> Comment stuffing in HTML attachments is a novel obfuscation technique worth understanding when tuning email security tooling or evaluating AI-based scanning products; no patch or config change required.</li> <li><strong>SOC/IR — Plan:</strong> Build or tune email-gateway detections to flag HTML attachments with abnormally high comment-to-content ratios, as this technique is designed specifically to bypass AI-based filters your stack may rely on.</li> <li><strong>Leader — Skip</strong></li> </ul>