AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery Paper • 2505.21499 • Published May 27, 2025 • 2 • 2
