Detecting and protecting against cybersecurity attacks using unprintable tracking characters

1. A computing platform, comprising:

at least one processor;

a communication interface communicatively coupled to the at least one processor; and

memory storing computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

receive, via the communication interface, a character-limited message sent to a user device;

scan the character-limited message to evaluate the character-limited message for suspicious content;

detect, based on the scan, that the character-limited message sent to the user device comprises suspicious content;

responsive to detecting that the character-limited message sent to the user device comprises the suspicious content, generate a modified character-limited message by selecting and inserting one or more unprintable characters into the character-limited message, wherein:

selecting and inserting the one or more unprintable characters into the character-limited message includes detecting a length of the character-limited message and inserting the one or more unprintable characters based on a number of available unused characters in the character-limited message,

the one or more unprintable characters are configured to track the character-limited message comprising the suspicious content and identify a confidence level, determined upon scanning the character-limited message, indicative of a confidence that the suspicious content is suspicious, and

the one or more unprintable characters include different unprintable characters indicating different confidence levels;

cause transmission of the modified character-limited message to the user device;

receive, via the communication interface, from the user device, a spam report confirming that the character-limited message comprises the suspicious content that is suspicious, wherein the spam report includes the modified character-limited message;

identify a presence of the one or more unprintable characters included in the modified character-limited message; and

adjust one or more filters based on identifying the presence of the one or more unprintable characters included in the modified character-limited message.

2. The computing platform of claim 1 , wherein the one or more unprintable characters indicates a type of messaging associated with the character-limited message sent to the user device.

3. The computing platform of claim 1 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

prior to detecting that the character-limited message sent to the user device comprises the suspicious content, classify the character-limited message based on message type.

4. The computing platform of claim 1 , wherein generating the modified character-limited message by inserting the one or more unprintable characters into the character-limited message further comprises:

prioritizing the one or more unprintable characters for insertion based on one or more criteria; and

inserting the one or more unprintable characters based on the prioritization.

5. The computing platform of claim 1 , wherein the character-limited message comprises at least one of a short message service (SMS) message or a multimedia messaging service (MMS) message.

6. The computing platform of claim 1 , wherein adjusting the one or more filters comprises modifying one or more filter criteria based on an aggregate of character-limited messages identified as comprising actually suspicious content.

7. The computing platform of claim 1 , wherein adjusting the one or more filters comprises allowing more character-limited messages to pass through to the user device.

8. The computing platform of claim 1 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

receive, via the communication interface, an additional character-limited message sent to the user device;

based on the adjusted one or more filters, detect that the additional character-limited message sent to the user device comprises the suspicious content; and

based on detecting that the additional character-limited message sent to the user device comprises the suspicious content, execute one or more security actions.

9. The computing platform of claim 8 , wherein executing the one or more security actions comprises blocking the additional character-limited message or inserting a warning message into the additional character-limited message.

10. A method, comprising:

at a computing platform comprising at least one processor, a communication interface, and memory:

receiving, by the at least one processor, a character-limited message sent to a user device;

scanning, by the at least one processor, the character-limited message to evaluate the character-limited message for suspicious content;

detecting, by the at least one processor and based on the scanning, that the character-limited message sent to the user device comprises suspicious content;

responsive to detecting that the character-limited message sent to the user device comprises the suspicious content, generating, by the at least one processor, a modified character-limited message by selecting and inserting one or more unprintable characters into the character-limited message, wherein:

selecting and inserting the one or more unprintable characters into the character-limited message includes detecting a length of the character-limited message and inserting the one or more unprintable characters based on a number of available unused characters in the character-limited message,

the one or more unprintable characters are configured to track the character-limited message comprising the suspicious content and identify a confidence level, determined upon scanning the character-limited message, indicative of a confidence that the suspicious content is suspicious, and

the one or more unprintable characters include different unprintable characters indicating different confidence levels;

causing, by the at least one processor, transmission of the modified character-limited message to the user device;

receiving, by the at least one processor, from the user device, a spam report confirming that the character-limited message comprises the suspicious content that is suspicious, wherein the spam report includes the modified character-limited message;

identifying, by the at least one processor, a presence of the one or more unprintable characters included in the modified character-limited message; and

adjusting, by the at least one processor, one or more filters based on identifying the presence of the one or more unprintable characters included in the modified character-limited message.

11. The method of claim 10 , wherein generating the modified character-limited message by inserting the one or more unprintable characters into the character-limited message further comprises:

prioritizing, by the at least one processor, the one or more unprintable characters for insertion based on one or more criteria; and

inserting, by the at least one processor, the one or more unprintable characters based on the prioritization.

12. The method of claim 10 , further comprising:

receiving, by the at least one processor, an additional character-limited message sent to the user device;

based on the adjusted one or more filters, detecting, by the at least one processor, that the additional character-limited message sent to the user device comprises the suspicious content; and

based on detecting that the additional character-limited message sent to the user device comprises the suspicious content, executing, by the at least one processor, one or more security actions.

13. One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor, a communication interface, and memory, cause the computing platform to:

receive, via the communication interface, a character-limited message sent to a user device;

scan the character-limited message to evaluate the character-limited message for suspicious content;

detect, based on the scan, that the character-limited message sent to the user device comprises suspicious content;

responsive to detecting that the character-limited message sent to the user device comprises the suspicious content, generate a modified character-limited message by selecting and inserting one or more unprintable characters into the character-limited message, wherein:

selecting and inserting the one or more unprintable characters into the character-limited message includes detecting a length of the character-limited message and inserting the one or more unprintable characters based on a number of available unused characters in the character-limited message,

the one or more unprintable characters are configured to track the character-limited message comprising the suspicious content and identify a confidence level, determined upon scanning the character-limited message, indicative of a confidence that the suspicious content is suspicious, and

the one or more unprintable characters include different unprintable characters indicating different confidence levels;

cause transmission of the modified character-limited message to the user device;

receive, via the communication interface, from the user device, a spam report confirming that the character-limited message comprises the suspicious content that is suspicious, wherein the spam report includes the modified character-limited message;

identify a presence of the one or more unprintable characters included in the modified character-limited message; and

adjust one or more filters based on identifying the presence of the one or more unprintable characters included in the modified character-limited message.