{"success":true,"data":{"id":"attachment-filename-mixed-script","label":"Attachment filename mixes Latin with Cyrillic/Greek (homograph)","description":"An attachment filename contains BOTH an ASCII Latin letter AND a Cyrillic or Greek letter — e.g. `invoiсe.pdf` where the `с` is Cyrillic U+0441, not Latin `c`. Rendered by every mail client the filename reads as `invoice.pdf`, so the user clicks what they think is a familiar PDF while the actual file may be a malware carrier, an auto-mounting ISO, or a completely different file type. The mixed-script constraint is the precision key: a pure Cyrillic filename from a Russian user (`договор.pdf`, all Cyrillic) does NOT fire because no ASCII letters are mixed in. Only the deliberate spoofing shape triggers. Weighted at +5 — high-confidence deception with zero legitimate use.","tier":"danger","category":"attachment","isThin":false}}