Text this: Detection of L0-optimized attacks via anomaly scores distribution analysis