New email scam uses hidden characters to slip past filters