I would not consider the attribute "rare" to be appropriate here.
For example: I regularly deal with adversarial networks, and both black- and white-box attacks are quite common there.