Realistic Environmental Injection Attacks on GUI Agents. - Yitong Zhang; Ximo Li; Liyi Cai; Jia Li (CoRR, 2025)