Preliminary research

Evil Font Labs: cross-format glyph-remapping deception

DoctorEww · GitHub

AI-collected research leads through 6 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.

Five DEF CON 34 exercises teach how remapped glyphs make visible text differ from copied or extracted text in HTML, DOCX and PDF. The labs cover JavaScript-free ClickFix deception, document-security and AI-review mismatches, portable setup-guide payloads, and open-ended design work, with platform and rendering prerequisites stated.

Record

Researcher

DoctorEww

Published by

GitHub

Format

Code

In the archive

• Collected in the 2026 preliminary research sweep

Related sources

• Tool
• Demos

Tags

• tooling
• phishing
• clipboard
• prompt-injection
• pdf
• owasp-a03-2021
• owasp-a04-2021

This page is the archive's own catalogue record. The research is the work of DoctorEww, first published at the original source. Preserved copies are kept so the citation survives its host.