@article{adinjectrealworldblackboxattacksonweb,
  title = {AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery},
  author = {Haowei Wang and Junjie Wang and Xiaojun Jia and Rupeng Zhang and Mingyang Li and Zhe Liu and Yang Liu and Qing Wang},
  year = {2025},
  eprint = {2505.21499},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2505.21499v1},
}