Web-Scale Data Poisoning via Split-View Attack

# Web-Scale Data Poisoning via Split-View Attack

https://gcdradar.vercel.app/incidents/web-scale-data-poisoning-via-split-view-attack · AIR-2025-0048 · closed 2025-03-28

- Lane: Research
- Severity: 1 (Research / proof of concept)
- Fix status: Fix status unknown
- First reported: 2025-03-14 (happened 2024-06-06)
- AI role: Attack on AI

## Summary

Researchers showed that popular web-scale datasets using URL lists are vulnerable to split-view poisoning attacks through expired domains. The technique allows attackers to replace training content with malicious data.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-03-14: Poisoning Web-Scale Training Datasets is Practical (https://arxiv.org/pdf/2302.10149)
- 2025-03-14: Web-Scale Data Poisoning: Split-View Attack (https://atlas.mitre.org/studies/AML.CS0025)

## Sources

- 2025-03-14 MITRE ATLAS: Web-Scale Data Poisoning: Split-View Attack https://atlas.mitre.org/studies/AML.CS0025
- 2025-03-14 arXiv: Poisoning Web-Scale Training Datasets is Practical https://arxiv.org/pdf/2302.10149

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.