Web Agent Attack on OpenClaw
98.5ASRMIRAGE
Evaluation results
| Method | Links | |
|---|---|---|
| MIRAGEBackend=Qwen2026.06 | 98.5 | |
| Context IgnoringBackend=Qwen2026.06 | 44.2 | |
| Naive AttackBackend=Qwen2026.06 | 30.7 | |
| WebInject*Backend=Qwen2026.06 | 25.8 | |
| Popup AttackBackend=Qwen2026.06 | 25.2 | |
| EIABackend=Qwen2026.06 | 22.7 |