Mole Recruitment: Poisoning of Image Classifiers via Selective Batch Sampling