Multi-attacks: Many images + the same adversarial attack → many target labels - Stanislav Fort (2023)