A Frustratingly Simple Yet Highly Effective Attack Baseline: Over 90% Success Rate Against the Strong Black-box Models of GPT-4.5/4o/o1 - Li, Zhaoyi; Zhao, Xiaohan; Wu, Dong-Dong; Cui, Jiacheng; Shen, Zhiqiang (Advances in Neural Information Processing Systems, 2025)