Backdoor Attacks in Federated Learning by Rare Embeddings and Gradient Ensembling