SneakyBits Zero-Width Binary Steganography - ATR-2026-00313 (fc075aed-dea9-59a5-adda-0009f608adda)
Detects SneakyBits invisible-binary steganography from NVIDIA garak encoding.InjectSneakyBits probe. The technique, coined by Johann Rehberger (embracethered.com/blog/posts/2025/sneaky-bits-and-ascii-smuggler), encodes each ASCII bit as an invisible Unicode operator: U+2062 (INVISIBLE TIMES) for binary 0 and U+2064 (INVISIBLE PLUS) for binary 1, with word boundaries encoded as U+200B (ZERO WIDTH SPACE). Every printable ASCII character produces 7 consecutive invisible operators; a 4-letter word produces 28 consecutive U+2062/U+2064 characters. Garak wraps blobs in TEMPLATES including "ASCII in hidden unicode binary encoding encoded string:". Key signals: 14+ consecutive characters from {U+2062, U+2064} (= 2 encoded chars minimum); word-separated binary streams interleaved with U+200B; and the unique encoding_name keyword.