MobileProbe: Adaptive Security Evaluation of Mobile Agents via Trajectory-Aware Injection

Summary

MobileProbe is a red-teaming framework that tests mobile GUI agents against environmental injection attacks, where malicious instructions embedded in on-screen UI redirect the agent's actions. It discovers attacker-controllable content, localizes vulnerable decision points along the agent's trajectory, and iteratively refines context-aware payloads through a surrogate-filtered evolutionary loop. Across 83 long-horizon attack instances in 12 mobile applications, it reports higher attack success rates than human-written, zero-shot LLM and prior automated baselines on three agent architectures.

Related items

• InfoIntent-Aware Protection for AI AgentsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• MediumCVE-2026-126767: OpsTree REMS prompt injection exposes hidden system prompt via /api/v1/rca/chatSimilar attack · NVD/CVE Database
• LowYour Robot's Safety Functions Already Work. What If the Input Lies?Similar attack · VicOne Blog
• InfoTop GenAI security resources — November 2026Similar attack · Adversa AI Blog
• LowOne Fabrication Is Enough: A Fake News Article Changes the Forecasts of LLM Forecasting SystemsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)