Off-Distribution Voices: Fanfiction Subgenres as Universal Vernacular Jailbreaks for Aligned LLMs

In three linesResearchers demonstrate a jailbreak family using fanfiction subgenres (Archive of Our Own) as universal attack carriers against 8 aligned LLMs. Requiring no attacker LLM or per-target adaptation, the method raises mean ASR from 0.278 to 0.731. Four-turn extension SAGA-A4 achieves 0.924 ASR.

Summary generated by Claude — human-verified