Skip to content

Hide Navigation Hide TOC

Dense Emoji-Only Payload Flood - ATR-2026-02015 (1760b90d-5c39-5aa3-864f-483df34b7953)

Detects dense, emoji-only content floods used to evade text-based prompt-injection and jailbreak filters. Attackers substitute or pad natural-language payloads with long unbroken runs of emoji (pictographs, symbols, dingbats) to defeat keyword and semantic pattern matching while still smuggling structure, encoded meaning, or attention-consuming filler past detectors that only inspect linguistic tokens. Recovered from a gated false-negative cluster: engine-verified recovers=32, benignFP=0 on the 4,817-record benign gate. Fires on runs of 8 or more consecutive emoji-class codepoints (with optional whitespace between them), which is well beyond normal conversational emoji usage but consistent with flood/evasion payloads.

Cluster A Galaxy A Cluster B Galaxy B Level
Dense Emoji-Only Payload Flood - ATR-2026-02015 (1760b90d-5c39-5aa3-864f-483df34b7953) Agent Threat Rules LLM Prompt Injection (19cd2d12-66ff-487c-a05c-e058b027efc9) MITRE ATLAS Attack Pattern 1
Dense Emoji-Only Payload Flood - ATR-2026-02015 (1760b90d-5c39-5aa3-864f-483df34b7953) Agent Threat Rules LLM Jailbreak (172427e3-9ecc-49a3-b628-96b824cc4131) MITRE ATLAS Attack Pattern 1