Abstract: Most of the transfer-based adversarial attack methods suffer from large perceptual distortions, i.e., visible artifacts, when the attack success rate is relatively high. It is worth noting ...