Free-rider Attacks on Model Aggregation in Federated Learning