EvilFontTool leverages 'evil fonts' that remap glyphs so that the visible text differs from the underlying text data. This discrepancy enables attackers to craft documents that appear safe or benign to human viewers and security tools that inspect text on disk, while actually containing malicious commands or content. The tool supports multiple formats including HTML, DOCX, and PDF, and can be used for pastejacking without JavaScript, AI filter evasion, and document poisoning. The technique is demonstrated with examples such as tampering homework, poisoning help desk documents, and bypassing AI resume filters. The underlying method exploits font rendering to deceive both users and automated security systems.

This technique can be used to bypass security tooling that relies on inspecting machine-readable text, enabling attackers to deliver malicious commands or content that appear benign. It facilitates initial access in corporate networks, evades AI content filters, and allows attackers to plant traps or poison documentation. The deception can lead to execution of unintended commands by users copying and pasting text, potentially causing data loss or system compromise. However, no active exploits in the wild are reported at this time.

No official patches or vendor advisories are available as this is a novel red team tactic rather than a software vulnerability. Mitigation involves awareness and detection strategies such as verifying text integrity by copying content into plain text editors to reveal discrepancies, disabling or restricting custom font usage in sensitive environments, and enhancing security tools to detect font-based text manipulation. Organizations should educate users about the risks of copying and pasting commands from untrusted documents and consider implementing controls on document handling and font usage.