The Work-Averse Attacker Model