LoginTrap: Uncovering Task-Agnostic Phishing-Style Indirect Prompt Injection Attacks against LLM-based Web Agents

arXiv:2608.04741 · cs.CR · Submitted 2026-08-05 · Read on arXiv

Longtao Guo, Zelin Zhang, Kaifeng Huang, Yang Shi

cs.CR

Submitted: 2026-08-05

Code: https://github.com/browser-use/browser-use

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

Agent Architectures — 9× in this paper · explained in 1 episode
Information Leakage — 8× in this paper · explained in 2 episodes
Grounding — 7× in this paper · explained in 3 episodes
Benchmarking — 6× in this paper · explained in 3 episodes
Benchmark — 4× in this paper · explained in 2 episodes
Network and Distributed System Security Symposium — 3× in this paper
Robustness — 3× in this paper · explained in 5 episodes
Actor — 2× in this paper · explained in 3 episodes
Reinforcement Learning — 2× in this paper · explained in 4 episodes
Trace — 2× in this paper · explained in 2 episodes
Abstraction — 1× in this paper · explained in 1 episode
Attack Success Rate — 1× in this paper
Attack Success Rate (ASR) — 1× in this paper · explained in 2 episodes
Large Language Models (LLMs) — 1× in this paper · explained in 6 episodes
Login Entry Rate — 1× in this paper
Page Exploitability Rate — 1× in this paper
Reasoning Traces — 1× in this paper · explained in 3 episodes
Transferability — 1× in this paper · explained in 4 episodes
Visual Grounding — 1× in this paper · explained in 2 episodes

Sources

Related papers