@misc{indiciaee957fb9965ba,
  title = {AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery},
  author = {Haowei Wang and Junjie Wang and Xiaojun Jia and Rupeng Zhang and Mingyang Li and Zhe Liu and Yang Liu and Qing Wang},
  year = {2025},
  url = {https://arxiv.org/abs/2505.21499},
  note = {Source identifier: 2505.21499}
}