Abstract: Transfer-based attacks craft adversarial examples on white-box surrogate models and directly deploy them against black-box targets, posing practical query-free threat scenarios. While ...