Multi-concept adversarial attacks