Adversarial attacks hidden in plain sight