Zero Dynamics Attacks on Unknown Bilinear Systems: Vulnerability and Detection