where is the targeted version of universal perturbation?

[machanic]

My concept of targeted attack means we want to set specific target class to let the attacker to make such adversarial image. Can universal perturbation do that and how?

[Uno-Takashi]

Look around following fork.
Uno-Takashi/Targeted-Universal-Adversarial-Perturbation: Extended Universal Adversarial Perturbation to targeted attack.