{
  "id": "arxiv:2505.21499",
  "citation-key": "arxiv_2505_21499",
  "type": "article",
  "title": "AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery",
  "URL": "https://arxiv.org/abs/2505.21499v1",
  "custom": {
    "catalog_id": "arxiv:2505.21499",
    "catalog_kind": "paper",
    "catalog_review_status": "curated",
    "canonical_source_url": "https://arxiv.org/abs/2505.21499",
    "identifiers": {
      "arxiv": "2505.21499"
    },
    "first_published_at": "2025-05-27",
    "record_updated_at": "2025-05-27",
    "catalog_scope": "core",
    "arxiv_snapshot": {
      "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
      "abstract_sha256": "f8aade17e67471c87f259d49aef43b3caf764b6ac14f99e1a4114f4a25dda3d6",
      "submitted_at": "2025-05-27T17:59:05Z",
      "updated_at": "2025-05-27T17:59:05Z",
      "version": 1,
      "versioned_url": "https://arxiv.org/abs/2505.21499v1"
    }
  },
  "note": "First published: 2025-05-27; Recorded arXiv version: v1; Recorded version updated: 2025-05-27T17:59:05Z.",
  "author": [
    {
      "literal": "Haowei Wang"
    },
    {
      "literal": "Junjie Wang"
    },
    {
      "literal": "Xiaojun Jia"
    },
    {
      "literal": "Rupeng Zhang"
    },
    {
      "literal": "Mingyang Li"
    },
    {
      "literal": "Zhe Liu"
    },
    {
      "literal": "Yang Liu"
    },
    {
      "literal": "Qing Wang"
    }
  ],
  "issued": {
    "date-parts": [
      [
        2025,
        5,
        27
      ]
    ]
  },
  "archive": "arXiv",
  "archive_location": "2505.21499",
  "genre": "preprint",
  "version": "1"
}