Each ASCII character in the JavaScript payload is converted into an 8-bit binary representation, and the binary values (ones and zeros) in it are replaced with invisible Hangul characters.

A security researcher has shed light on how invisible characters ... JavaScript code to introduce security risks, like backdoors, into your software. Not everything is what it seems, in Unicode ...