Universal Adversarial Perturbations and Image Spam Classifiers