Cancerous Backdoor Attack: Gradual Activation Via Invisible Tokens and a Stage Controller

Backdoor Attacks on Large Language Models LLMs typically follow a trigger-response pattern, where satisfying a trigger condition activates a single terminal behavior. However, this single-point backdoor activation does not explore attacks in which malicious behavior develops gradually through...