Abstract: Most existing adversarial attack methods for remote sensing images merely add adversarial perturbations or patches, resulting in visually unnatural modifications. Clouds are common ...