Two different adversarial attacks have been implemented and tested here and a new type of attack will be created from them. More detail can be found here
https://sites.google.com/view/designsix/adversarial-learning
The two types of attacks: https://arxiv.org/pdf/1904.02144.pdf https://arxiv.org/pdf/1810.00470v4.pdf