Create a lot of text files filled with offensive and false information. Maybe 4chan and OANN transcripts :)

It will always be a cat-and-mouse game. Once the trainers recognize the attack, they can use the attack to further improve their models. A long time ago I watched a speech from a guy who worked on Yahoo! Mail's spam detection. They realized spammers would create email accounts, send spam to them, then have the accounts mark their spam as "not spam." They came up with a method to automatically identify these accounts, and used them to further improve their spam detection model (if these accounts marked something as "not spam" it was likely spam).