Y. Yan and J. Tian, “Data-Free Universal Attack by Exploiting the Intrinsic Vulnerability of Deep Models”, AAAI, vol. 39, no. 9, pp. 9130–9138, Apr. 2025.