Tag: Training model implanted with malicious behavior