Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS. - Bingyu Yan; Ziyi Zhou; Xiaoming Zhang; Chaozhuo Li; Ruilin Zeng; Yirui Qi; Tianbo Wang; Litian Zhang (CoRR, 2025)