Pengfei Zhang

The paper introduces the Proactive Availability Backdoor (PAB), a novel social engineering attack that weaponizes LLM helpfulness to proactively trap users into executing malicious queries, achieving a high attack success rate of 73.1%.