Visual-only perturbations in fine-tuning screenshots can implant backdoors in VLM-based mobile agents, triggering attacker-chosen actions at inference.
Title resolution pending
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.CR 1years
2025 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents
Visual-only perturbations in fine-tuning screenshots can implant backdoors in VLM-based mobile agents, triggering attacker-chosen actions at inference.