- Flashpoint warns cybercriminals of using emojis to evade detection
- Emojis replace scam and financial keywords to bypass filters
- Symbols like 💳, 🔑, 🤖 signal maps, credentials and malware
Nowadays, like everyone else, cybercriminals also use emojis. But they don’t just use them to make their messages fun or exciting, they also use them to hide their communications in plain sight and escape the scrutiny of security analysts.
That’s according to a new report from threat intelligence experts, Flashpoint. Published earlier this week, Flashpoint says bad actors can replace emojis with keywords associated with fraud techniques, financial activity, as well as specific platforms or services.
“For example, replacing “credit card” with 💳 or “bank” with 🏦 can help bypass basic keyword filters or reduce visibility in automated moderation systems,” the report says. “When combined with slang, abbreviations and multilingual wording, this creates a form of multi-layered obfuscation that complicates large-scale surveillance efforts. »
Article continues below
In other words, security professionals who scour the dark web for information about breaches and new malware services should also start adding emojis to the list of monitored keywords.
Many categories
Flashpoint divided the emojis used by scammers into a few categories, such as financial activity, credentials and compromises, tools, automations and services, targets and geography, and urgency, success and status.
Some emojis, such as 💰 and 💸, may signal profit, successful fraud, or payments, while 🪙 may suggest cryptocurrency-related activity.
These emojis – 🔑, or 🔓, relate to account credentials and access, as well as successful breaches and unlocked accounts. For tools, automation, and services, emojis like 🤖, ⚙️, or 🧰 describe malware, settings, toolkits, and bundled services.
The full list of analyzed emojis is available here.
Flashpoint also says there’s another practical aspect to using emojis: being able to communicate properly across regions and languages. Not everyone in the cybercriminal community speaks (good) English, and being able to inform everyone about certain activities – quickly – is certainly helpful.
All we will add to this is – 🤮
The best antivirus for every budget
Follow TechRadar on Google News And add us as your favorite source to get our news, reviews and expert opinions in your feeds. Make sure to click the Follow button!
And of course you can too follow TechRadar on TikTok for news, reviews, unboxings in video form and receive regular updates from us on WhatsApp Also.




