Mobius Injection: Can a Single Message Paralyze AI Infrastructure?

As AI agents proliferate, agent-to-agent communication is becoming ubiquitous. But this also opens an entirely new attack surface—what happens if a malicious agent sends a carefully crafted message to another agent?

We proposed AbO-DDoS (Agent-borne DDoS), a new form of distributed denial-of-service attack. The adversary uses "Mobius Injection"—a recursively structured, self-triggering message—to trap all nodes in the agent network in an infinite resource-consumption loop.

At its core, this exploits a fundamental property of LLMs: computation cost is (super-)linear in input size. If you can make an input circulate and get "processed" into increasing complexity at each hop, you can trigger cascading resource exhaustion across the agent network.

A Möbius strip is a one-sided surface with no beginning and no end. Our injected message is similar—it has no termination condition, mutating perpetually as it passes between agents but never stopping.

• Title: Can a Single Message Paralyze the AI Infrastructure? The Rise of AbO-DDoS Attacks through Targeted Mobius Injection
• Authors: Zi Liang, Ronghua Li, Yanyun Wang, Qingqing Ye, Haibo Hu
• Status: Preprint 2026
• Code: https://github.com/liangzid/MobiusInjection