Phantom Transfer: Data Poisoning can Survive Data-Level Defences
The Phantom Transfer attack demonstrates that sophisticated data poisoning can bypass existing dataset-level defenses. The attack covertly steers student models toward specific sentiments by modifying how teacher models are prompted and how data is filtered, even when datasets are paraphrased. This proves that current maximum-affordance defenses are fundamentally incapable of stopping such targeted poisoning.