MIP against Agent: Malicious Image Patches Hijacking Multimodal OS Agents
Studies Malicious Image Patches (MIPs), altered screen regions that can steer screenshot-based OS agents into harmful mouse and keyboard actions.
AI-assisted editorial review against a primary source. This is a catalog annotation, not an independent reproduction or endorsement.
What is this resource?
- Resource type
- Research paper
- Environment
- Desktop
- Topics
- Safety & security, Screen understanding
- Record publication date
- 2025-03-13
- Evidence retrieved
- 2026-11-05
- Resource ID
- arxiv:2503.10809
Recorded paper version
Version updated: 2026-01-27T18:10:17Z.
This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.
Abstract fingerprint
7e5622a83d74c18761a7ab88c98682d3903ce0b6700c7e9814f069bfba26e796Authors
Lukas Aichberger, Alasdair Paren, Guohao Li, Philip Torr, Yarin Gal, Adel Bibi
Cite this paper
Download BibTeX · Download CSL JSON
Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.
Explore related topics
Scope and limitations
The annotation and scope were reviewed against the complete retained arXiv abstract (v3). Experiments, reported performance and artifact availability have not been independently reproduced.
Primary evidence and verification
Source retrieval is separate from experiment reproduction. Use the original publication or publisher page when citing claims about the resource.
- arxiv api
Retrieved 2026-10-17T07:57:44Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.
Content fingerprint
9ca057ee6538002c739e58a7b3f86fc51a434d085a33e5590f0720e4f27c6b24 - editorial primary review
Retrieved 2026-11-05T23:01:33Z. Supports: name, kind, summary, environments, topics, scope, relations.
Content fingerprint
b7001e189c17d6fa072573558661e37a7cb4c7709d33080603d72a969cc4ba39
Suggest a correction
Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.