Adversarial clustering