@inproceedings{lee-etal-2026-will,
    title = "Will the User Ever Know? Covert Indirect Prompt Injection Attacks on Tool-Using {LLM} Agents",
    author = "Lee, Yunseok  and
      Kim, Yunji  and
      Lee, Woojin",
    editor = "Lee, Hung-Yi  and
      Dev, Sunipa  and
      Li, Jessy  and
      Elliott, Desmond",
    booktitle = "Proceedings of the 2026 Conference on Empirical Methods in Natural Language Processing",
    month = oct,
    year = "2026",
    address = "Budapest, Hungary",
    publisher = "Association for Computational Linguistics",
    url = "https://aclanthology.org/2026.emnlp-main.2035/",
    pages = "46371--46389",
    ISBN = "979-8-89176-459-0"
}