MIRAGE puts image attacks in ad slots to control web agents
An attacker must control only a small part of a page, such as an ad slot.
Researchers show MIRAGE, a visual prompt-injection method for web agents. An attacker controls only a small part of a page, such as an ad slot, and puts in an image that looks safe. The image changes the next step of the agent.
Sources
Posted