AI Watermarks Are No Match for Attackers