A PAIR-style attacker editing a single retrieved webpage moved a chosen business to rank 1 in 50 percent of 124 trials across two Claude models, and most winning edits succeeded again in fresh sessions.
Title resolution pending
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
citation-role summary
background 1
citation-polarity summary
fields
cs.IR 1years
2026 1verdicts
CONDITIONAL 1roles
background 1polarities
background 1representative citing papers
citing papers explorer
-
SIREN (Luring LLMs onto the Rocks): PAIR-Driven Preference Manipulation in Web-RAG Recommenders
A PAIR-style attacker editing a single retrieved webpage moved a chosen business to rank 1 in 50 percent of 124 trials across two Claude models, and most winning edits succeeded again in fresh sessions.