{
  "aliases": [],
  "authors": [
    "Ziang Ye",
    "Yang Zhang",
    "Wentao Shi",
    "Xiaoyu You",
    "Fuli Feng",
    "Tat-Seng Chua"
  ],
  "details": {
    "arxiv_snapshot": {
      "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
      "abstract_sha256": "010a3a54ba37417c97e52434211375447418dd2e7ce1da6c339532534f0a920e",
      "submitted_at": "2025-07-09T14:36:00Z",
      "updated_at": "2025-09-24T14:33:17Z",
      "version": 2,
      "versioned_url": "https://arxiv.org/abs/2507.06899v2"
    }
  },
  "environments": [
    "web",
    "desktop"
  ],
  "evidence": [
    {
      "method": "arxiv_api",
      "retrieved_at": "2026-10-16T06:36:50Z",
      "role": "primary",
      "sha256": "26fb4922c4c0bb5c9069935ed0aef0a9f56938cf8ae1af9724894fa1409955fb",
      "supports": [
        "name",
        "authors",
        "published_at",
        "updated_at",
        "identifiers.arxiv",
        "details.arxiv_snapshot"
      ],
      "url": "https://export.arxiv.org/api/query?search_query=%28ti%3A%22computer+use%22+OR+ti%3A%22computer-use%22+OR+ti%3A%22GUI+agent%22+OR+ti%3A%22GUI+agents%22+OR+ti%3A%22GUI+grounding%22+OR+ti%3A%22web+agents%22+OR+ti%3A%22browser+agent%22%29+AND+submittedDate%3A%5B200001010000+TO+202610160636%5D&start=600&max_results=100&sortBy=submittedDate&sortOrder=descending"
    },
    {
      "method": "editorial_primary_review",
      "retrieved_at": "2026-10-16T06:36:50Z",
      "role": "primary",
      "sha256": "26fb4922c4c0bb5c9069935ed0aef0a9f56938cf8ae1af9724894fa1409955fb",
      "supports": [
        "name",
        "kind",
        "summary",
        "environments",
        "topics",
        "scope",
        "notes"
      ],
      "url": "https://export.arxiv.org/api/query?search_query=%28ti%3A%22computer+use%22+OR+ti%3A%22computer-use%22+OR+ti%3A%22GUI+agent%22+OR+ti%3A%22GUI+agents%22+OR+ti%3A%22GUI+grounding%22+OR+ti%3A%22web+agents%22+OR+ti%3A%22browser+agent%22%29+AND+submittedDate%3A%5B200001010000+TO+202610160636%5D&start=600&max_results=100&sortBy=submittedDate&sortOrder=descending"
    }
  ],
  "id": "arxiv:2507.06899",
  "identifiers": {
    "arxiv": "2507.06899"
  },
  "kind": "paper",
  "last_verified_at": "2026-10-16T06:36:50Z",
  "licenses": {
    "code": null,
    "data": null,
    "document": null,
    "weights": null
  },
  "links": [
    {
      "rel": "primary",
      "url": "https://arxiv.org/abs/2507.06899"
    }
  ],
  "name": "VisualTrap: A Stealthy Backdoor Attack on GUI Agents via Visual Grounding Manipulation",
  "notes": "Reviewed against the complete retained original arXiv abstract. Experimental results and artifact availability have not been independently reproduced.",
  "published_at": "2025-07-09",
  "relations": [],
  "review_status": "curated",
  "scope": "core",
  "summary": "Studies backdoors that redirect GUI visual grounding even when the task plan is correct. VisualTrap evaluates whether poisoned grounding training transfers to downstream tasks and across web, mobile, and desktop interface settings.",
  "topics": [
    "safety-security",
    "grounding",
    "evaluation"
  ],
  "updated_at": "2025-09-24",
  "url": "https://arxiv.org/abs/2507.06899"
}