Invisible to Humans, Triggered by Agents: Stealthy Jailbreak Attacks on Mobile Vision-Language Agents
Uses the near-zero contact-touch signals of automated mobile agents to expose malicious visual content selectively during agent interactions. The paper combines this agent-only perceptual injection with HG-IDA* prompt optimization to study unauthorized cross-app actions.
AI-assisted editorial review against a primary source. This is a catalog annotation, not an independent reproduction or endorsement.
What is this resource?
- Resource type
- Research papers
- Environment
- unspecified
- Topics
- safety-security, mobile-navigation, robustness
- Record publication date
- 2025-10-09
- Evidence retrieved
- 2026-10-18T10:54:12Z
- Resource ID
- arxiv:2510.07809
Recorded paper version
Version updated: 2026-04-09T01:41:48Z.
This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.
Abstract fingerprint
e80999148931b7485d51ef87887d06240f813747a9739282ed0daf53a912f9f6Authors
Renhua Ding, Xiao Yang, Zhengwei Fang, Jun Luo, Kun He, Jun Zhu
Cite this paper
Download BibTeX · Download CSL JSON
Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.
Explore related topics
Scope and limitations
The annotation and scope were reviewed against the primary paper abstract. Experimental results and released artifacts have not been independently reproduced.
Primary evidence and verification
Source retrieval is separate from experiment reproduction. Use the original publication or publisher page when citing claims about the resource.
- arxiv api
Retrieved 2026-10-18T10:54:12Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.
Content fingerprint
5f5bae19420f79231516d4bcf604ea18d4f930fc7790cde5a3e7fcb8d41a1126 - editorial primary review
Retrieved 2026-10-18T10:54:12Z. Supports: name, kind, summary, environments, topics, scope, relations.
Content fingerprint
5f5bae19420f79231516d4bcf604ea18d4f930fc7790cde5a3e7fcb8d41a1126
Suggest a correction
Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.