I’m no lawyer, but deliberately performing adversarial attacks to get rich from being automatically and incorrectly fined feels like it ought to be somewhere between fraud and hacking (in the Computer Misuse Act sense rather than thr hackernews sense).