AML.T0016
MITRE ATLAS / Obtain Capabilities
Adversaries acquire existing software capabilities for use in their operations, including adversarial machine learning toolkits, exploit code, and commercial or open source offensive tools, rather than building their own.
In plain English
Mature tooling for attacking models already exists and much of it is open source and well documented. Buying or downloading is faster than building, so most adversaries do exactly that.