diff --git a/README.md b/README.md
index e1adec9..c72ef9d 100644
--- a/README.md
+++ b/README.md
@@ -128,6 +128,10 @@ Here, we've summarized existing LVLM Attack methods in our survey paper👍.
   * Yichi Zhang, Yinpeng Dong, Siyuan Zhan, Tianzan Min, Hang Su, Jun Zhu
   * Tsinghua University, RealAI, Pazhou Laboratory (Huangpu)
   * [CVPR2024] https://openaccess.thecvf.com/content/CVPR2024/papers/Zhang_Exploring_the_Transferability_of_Visual_Prompting_for_Multimodal_Large_Language_CVPR_2024_paper.pdf
+* **Break the Visual Perception: Adversarial Attacks Targeting Encoded Visual Tokens of Large Vision-Language Models** | #
+  * Yubo Wang, Chaohu Liu, Yanqiu Qu, Haoyu Cao, Deqiang Jiang, Linli Xu
+  * University of Science and Technology of China, Tencent YouTu Lab
+  * [ACMMM2024] https://arxiv.org/abs/2410.06699
 
 ## Jailbreak-Attack
 * **Are aligned neural networks adversarially aligned?** |