Your Attack Is Too DUMB: Formalizing Attacker Scenarios for Adversarial Transferability