SlowBA: An efficiency backdoor attack towards VLM-based GUI agents

Junxian Li , Tu Lan , Haozhen Tan , Yan Meng , Haojin Zhu

🏛 Institutions: SJTU
📅 Date: March 9, 2026
📑 Publisher: arXiv
💻 Env: General GUI
🔑 Keywords: backdoor attack response latency reward-level backdoor injection popup trigger security SlowBA

TLDR

SlowBA studies a backdoor attack on VLM-based GUI agents that targets response efficiency rather than action correctness, using realistic pop-up triggers to induce excessively long reasoning chains. Its two-stage reward-level backdoor injection stays stealthy, preserves task accuracy, and substantially increases latency under trigger conditions.

Open paper Code Report issue