Researchers found malware that lets AI models vote on how to attack you