Overcoming Black-box Attack Inefficiency with Hybrid and Dynamic Select Algorithms