Inverting Gradient Attacks Makes Powerful Data Poisoning