AgentRAE: Remote Action Execution through Notification-based Visual Backdoors against Screenshots-based Mobile GUI Agents

Yutao Luo , Haotian Zhu , Shuchao Pang , Zhigang Lu , Tian Dong , Yongbin Zhou , Minhui Xue

🏛 Institutions: Nanjing University of Science and Technology , Macquarie University , Western Sydney University , HKU , CSIRO Data61
📅 Date: March 24, 2026
📑 Publisher: arXiv
💻 Env: Mobile
🔑 Keywords: backdoor attack notification trigger security contrastive learning Remote Action Execution AgentRAE

TLDR

AgentRAE is a backdoor attack against screenshot-based mobile GUI agents that uses benign-looking notification icons as triggers for remote action execution. Its contrastive-pretraining plus poisoning pipeline preserves clean performance, exceeds 90% attack success over ten mobile operations, and evades eight representative defenses.

Open paper Report issue