Cybercriminals have yet to adopt machine learning for offensive attack strategies – and they probably won’t for a long time.