AudioHijack Attack Cases and Samples

Attack Cases

We tested AudioHijack on the Phi-4-Multimodal Nvidia Online Demo.

Note that in the tool misuse case, we directly insert tool prompts into user requests since the demo page does not provide system prompt interface.

Attack case 1
Case 1
Attack case 2
Case 2
Attack case 3
Case 3
Attack case 4
Case 4
Attack case 5
Case 5

Speech Samples

Carrier 0 — Benign
Speech carrier 0 benign
Carrier 0 — Additive L∞
Speech carrier 0 additive linf
Carrier 0 — Additive L2
Speech carrier 0 additive l2
Carrier 0 — Reverberated
Speech carrier 0 reverberated
Carrier 0 — Convolutional
Speech carrier 0 convolutional
Carrier 1 — Benign
Speech carrier 1 benign
Carrier 1 — Additive L∞
Speech carrier 1 additive linf
Carrier 1 — Additive L2
Speech carrier 1 additive l2
Carrier 1 — Reverberated
Speech carrier 1 reverberated
Carrier 1 — Convolutional
Speech carrier 1 convolutional
Carrier 2 — Benign
Speech carrier 2 benign
Carrier 2 — Additive L∞
Speech carrier 2 additive linf
Carrier 2 — Additive L2
Speech carrier 2 additive l2
Carrier 2 — Reverberated
Speech carrier 2 reverberated
Carrier 2 — Convolutional
Speech carrier 2 convolutional

Sound Samples

Carrier 0 — Benign
Sound carrier 0 benign
Carrier 0 — Additive L∞
Sound carrier 0 additive linf
Carrier 0 — Additive L2
Sound carrier 0 additive l2
Carrier 0 — Reverberated
Sound carrier 0 reverberated
Carrier 0 — Convolutional
Sound carrier 0 convolutional
Carrier 1 — Benign
Sound carrier 1 benign
Carrier 1 — Additive L∞
Sound carrier 1 additive linf
Carrier 1 — Additive L2
Sound carrier 1 additive l2
Carrier 1 — Reverberated
Sound carrier 1 reverberated
Carrier 1 — Convolutional
Sound carrier 1 convolutional
Carrier 2 — Benign
Sound carrier 2 benign
Carrier 2 — Additive L∞
Sound carrier 2 additive linf
Carrier 2 — Additive L2
Sound carrier 2 additive l2
Carrier 2 — Reverberated
Sound carrier 2 reverberated
Carrier 2 — Convolutional
Sound carrier 2 convolutional

Music Samples

Carrier 0 — Benign
Music carrier 0 benign
Carrier 0 — Additive L∞
Music carrier 0 additive linf
Carrier 0 — Additive L2
Music carrier 0 additive l2
Carrier 0 — Reverberated
Music carrier 0 reverberated
Carrier 0 — Convolutional
Music carrier 0 convolutional
Carrier 1 — Benign
Music carrier 1 benign
Carrier 1 — Additive L∞
Music carrier 1 additive linf
Carrier 1 — Additive L2
Music carrier 1 additive l2
Carrier 1 — Reverberated
Music carrier 1 reverberated
Carrier 1 — Convolutional
Music carrier 1 convolutional
Carrier 2 — Benign
Music carrier 2 benign
Carrier 2 — Additive L∞
Music carrier 2 additive linf
Carrier 2 — Additive L2
Music carrier 2 additive l2
Carrier 2 — Reverberated
Music carrier 2 reverberated
Carrier 2 — Convolutional
Music carrier 2 convolutional