Researchers built an invisible backdoor to hack AI's decisions