Cancerous Backdoor Attack Enables Gradual Reasoning Corruption

The Cancerous Backdoor Attack uses invisible tokens and a stage controller to gradually corrupt an LLM's reasoning through a sequence of interactions. Unlike traditional single-trigger attacks, this method achieves multi-stage activation that is difficult to detect during inference.