Transferable adversarial distribution learning: Query-efficient adversarial attack against large language models.