What Makes Adversarial Examples Transfer Across Deepfake Detectors?

arXiv:2609.10002v2 Announce Type: replace-cross Abstract: Deepfake detectors remain vulnerable to transfer-based black-box attacks, in which adversarial examples are generated on a source surrogate model and transferred to a target model, unknown to the attack