Meet Trick With Trick: Revealing Collusion Intentions in Highly Concealed Poisoning Behavior

Summary

This paper proposes METT, a divide-and-conquer detection method for data poisoning attacks on recommender systems. It combines causality inference over group-level and individual-level unfairness sequences, an early attack-target detection method named ideaT, and a disturbance tolerance mechanism for fake injections. On synthetic and real data, METT reduces the false alarm rate (FAR) by averages of 21% for S-attacks, 18% for profile injection attacks, 26% for reverse attacks, and 17% for optimal-injection attacks, and by 10% and 20% for hybrid promotion and demotion attacks.

Mitigation

METT, a divide-and-conquer detection method for data poisoning attacks on recommender systems.

Related items

• MediumCVE-2026-121936: easyVoice server-side request forgery through openaiBaseUrl in /api/v1/ttsSimilar attack · NVD/CVE Database
• MediumCVE-2026-118628: MLflow get-artifacts server-side request forgery information disclosureSimilar attack · NVD/CVE Database
• HighCVE-2026-118625: MLflow Tracking Server privilege escalation via get_endpointsSimilar attack · NVD/CVE Database
• InfoWhen trust becomes the payload: Inside the threats, etc quarterly reportSimilar attack · Elastic Security Labs
• MediumCritical Langflow flaws enable authentication bypass and RCESimilar attack · CSO Online