Efficiently adapting instance-level multimodal Trojan attacks to fine-tuned models through dual-modality adversarial learning.