Tao Ma, Hong Zhao, Ling Tang, Mingsheng Xue, Jing Liu. "Efficient black-box attack with surrogate models and multiple universal adversarial perturbations." Scientific Reports (2025). https://doi.org/10.1038/s41598-025-87529-z