Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents

Demonstrates clean-text visual backdoor attacks (VIBMA) that compromise fine-tuned VLM mobile agents through visual triggers while keeping text instructions intact.

AI-assisted editorial review against a primary source. This is a catalog annotation, not an independent reproduction or endorsement.

What is this resource?

Resource type

Research papers

Environment

android

Topics

safety-security, mobile-navigation, robustness

Record publication date

2025-06-16

Evidence retrieved

2026-10-18T10:54:08Z

Resource ID

arxiv:2506.13205

Recorded paper version

arXiv v6

Version updated: 2025-09-05T14:19:03Z.

This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.

Authors

Xuan Wang, Siyuan Liang, Zhe Liu, Yi Yu, Aishan Liu, Yuliang Lu, Xitong Gao, Ee-Chien Chang

Cite this paper

Download BibTeX · Download CSL JSON

Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.

Explore related topics

Scope and limitations

The annotation and scope were reviewed against the primary paper abstract. Experimental results and released artifacts have not been independently reproduced.

Primary evidence and verification

Source retrieval is separate from experiment reproduction. Use the original publication or publisher page when citing claims about the resource.

1. arxiv api

   Retrieved 2026-10-18T10:54:08Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.

   Content fingerprint

   00d275cd5407cec847fa9d43fe73cfc4384c5570b68a5e058c97921799be0bec
2. editorial primary review

   Retrieved 2026-10-18T10:54:08Z. Supports: name, kind, summary, environments, topics, scope, relations.

   Content fingerprint

   00d275cd5407cec847fa9d43fe73cfc4384c5570b68a5e058c97921799be0bec

Suggest a correction

Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.