L. Wang, Y. Tian, H. Han, and F. Xu, “Enhancing All-to-X Backdoor Attacks with Optimized Target Class Mapping”, AAAI, vol. 40, no. 42, pp. 35802–35810, Mar. 2026.