diff --git a/README.md b/README.md
index 374ac56..94c94cf 100644
--- a/README.md
+++ b/README.md
@@ -144,6 +144,10 @@ Here, we've summarized existing LVLM Attack methods in our survey paper👍.
   * Daizong Liu, Mingyu Yang, Xiaoye Qu, Pan Zhou, Xiang Fang, Keke Tang, Yao Wan, Lichao Sun
   * Peking University, Huazhong University of Science and Technology, Nanyang Technological University, Guangzhou University, Lehigh University
   * [NeurIPS2024] https://openreview.net/forum?id=gDpWYpocE1
+* **Image-based Multimodal Models as Intruders: Transferable Multimodal Attacks on Video-based MLLMs** | #
+  * Linhao Huang, Xue Jiang, Zhiqiang Wang, Wentao Mo, Xi Xiao, Bo Han, Yongjie Yin, Feng Zheng
+  * Tsinghua University, Southern University of Science and Technology, Hong Kong Baptist University, Hong Kong University of Science and Technology, China Electronics Corporation
+  * [Arxiv2025] https://arxiv.org/abs/2501.01042
 
 ## Jailbreak-Attack
 * **Are aligned neural networks adversarially aligned?** |