Unicode that's invisible to the human eye was largely abandoned—until attackers took notice.