Can an Attacker Train Themselves Into Your Baseline?

If a system learns what normal looks like, can an attacker teach it that their activity is normal too? Here is the honest answer.