New attack exploits frozen ViT backbones to fool deepfake detectors

Researchers have developed a new attack method called the Surrogate Iterative Adversarial Attack (SIAA) that can effectively undermine the reliability of deepfake detection systems. This gray-box attack exploits knowledge of the Vision Transformer (ViT) backbone used by detectors, crafting adversarial examples that approach white-box performance. The findings highlight a critical vulnerability in current synthetic image forensics, where relying on frozen pre-trained models leaves detectors susceptible to manipulation. AI

Summary written by gemini-2.5-flash-lite from 1 source. How we write summaries →

IMPACT Reveals a significant vulnerability in AI-based deepfake detection, necessitating more robust defense mechanisms.

RANK_REASON Academic paper detailing a new attack method against AI models. [lever_c_demoted from research: ic=1 ai=1.0]

Read on arXiv cs.CV →

• Surrogate Iterative Adversarial Attack (SIAA)
• Vision Transformer (ViT)
• Andrea Montibeller

• paper
• safety