# Attacking Vision-Language Computer Agents via Pop-ups

Tests whether adversarial visual pop-ups divert computer agents from intended tasks in desktop and web benchmark environments.

- Catalog URL: https://awesomecua.github.io/resources/arxiv-2411-02391/
- Original source: https://arxiv.org/abs/2411.02391
- Kind: paper
- Review: curated
- Scope: core
- Environments: desktop, web
- Topics: safety-security, evaluation
- Evidence checked: 2026-10-16T06:31:35Z
- ID: arxiv:2411.02391

## Limitations

The annotation and scope were reviewed against the primary paper abstract. Experimental results and released artifacts have not been independently reproduced.

- Record JSON: https://awesomecua.github.io/resources/arxiv-2411-02391/record.json

## Authors

Yanzhe Zhang, Tao Yu, Diyi Yang

## Citation exports

- BibTeX: https://awesomecua.github.io/resources/arxiv-2411-02391/citation.bib
- CSL JSON: https://awesomecua.github.io/resources/arxiv-2411-02391/citation.csl.json

## Publication record

- Title: Attacking Vision-Language Computer Agents via Pop-ups
- Authors: Yanzhe Zhang, Tao Yu, Diyi Yang
- Publication date (recorded precision): 2025-07
- Publication source: https://aclanthology.org/2025.acl-long.411/
- Publication BibTeX: https://awesomecua.github.io/resources/arxiv-2411-02391/publication-citation.bib
- Publication CSL JSON: https://awesomecua.github.io/resources/arxiv-2411-02391/publication-citation.csl.json
- venue: Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)
- publisher: Association for Computational Linguistics
- pages: 8387-8401
- doi: 10.18653/v1/2025.acl-long.411
- date basis: Explicit publisher citation_publication_date: 2025/7. Preserve supplied precision; do not substitute conference event dates.
- identity basis: Same work: normalized title, ordered author correspondence and the specific contribution in the complete publisher abstract were reviewed against the retained arXiv identity.
- notes: Publisher proceedings edition; retained separately from the arXiv snapshot.
- Publication evidence: https://aclanthology.org/2025.acl-long.411/

## Recorded arXiv snapshot

- Version: 2
- Version source: https://arxiv.org/abs/2411.02391v2
- First submission: 2024-11-04T18:56:42Z
- Version updated: 2025-05-24T16:15:46Z
- Abstract SHA-256: 085c64595365cc6439c8c5fa8a479259a3d59b7e9740e0f9d43e48d00e1439c0
- Abstract hash normalization: sha256-utf8-whitespace-collapsed-v1

## License declarations

- code: not recorded
- data: not recorded
- document: not recorded
- weights: not recorded

## Primary evidence

- https://export.arxiv.org/api/query?id_list=2410.00467%2C2410.00689%2C2410.02810%2C2410.02907%2C2410.05243%2C2410.06703%2C2410.08164%2C2410.09006%2C2410.09024%2C2410.11843%2C2410.11871%2C2410.11872%2C2410.13232%2C2410.13757%2C2410.13824%2C2410.13825%2C2410.13886%2C2410.14803%2C2410.15164%2C2410.16464%2C2410.17236%2C2410.17401%2C2410.17520%2C2410.17883%2C2410.18603%2C2410.18963%2C2410.18967%2C2410.19054%2C2410.19100%2C2410.19461%2C2410.19609%2C2410.20745%2C2410.22552%2C2410.23218%2C2410.24024%2C2411.00820%2C2411.02337%2C2411.02391%2C2411.04468%2C2411.04890%2C2411.06559%2C2411.07618%2C2411.10323%2C2411.13451%2C2411.13591%2C2411.15004%2C2411.17465%2C2411.18279%2C2412.00402%2C2412.01268&max_results=50 (retrieved 2026-10-16T06:31:35Z; SHA-256 b3e67984f59a1b05ccd946eb54e2d37b0bb78ab0ca796fbb6d544793dafea3e0)
- https://aclanthology.org/2025.acl-long.411/ (retrieved 2026-10-18T04:09:56Z; SHA-256 a28a603d74e08954a05265f54c8765bd874a6cb2fc0c5a68a35e15e68692b0a1)
- https://export.arxiv.org/api/query?id_list=2410.00467%2C2410.00689%2C2410.02810%2C2410.02907%2C2410.05243%2C2410.06703%2C2410.08164%2C2410.09006%2C2410.09024%2C2410.11843%2C2410.11871%2C2410.11872%2C2410.13232%2C2410.13757%2C2410.13824%2C2410.13825%2C2410.13886%2C2410.14803%2C2410.15164%2C2410.16464%2C2410.17236%2C2410.17401%2C2410.17520%2C2410.17883%2C2410.18603%2C2410.18963%2C2410.18967%2C2410.19054%2C2410.19100%2C2410.19461%2C2410.19609%2C2410.20745%2C2410.22552%2C2410.23218%2C2410.24024%2C2411.00820%2C2411.02337%2C2411.02391%2C2411.04468%2C2411.04890%2C2411.06559%2C2411.07618%2C2411.10323%2C2411.13451%2C2411.13591%2C2411.15004%2C2411.17465%2C2411.18279%2C2412.00402%2C2412.01268&max_results=50 (retrieved 2026-10-16T06:31:35Z; SHA-256 b3e67984f59a1b05ccd946eb54e2d37b0bb78ab0ca796fbb6d544793dafea3e0)