If anybody is considering a tool to beat this AI, "Blended Uniform Noise Attacks" are what you want. https://foolbox.readthedocs.io/en/latest/modules/attacks/decision.html#foolbox.attacks.BlendedUniformNoiseAttack

Happy hacking