Diffusion Models As Strong Adversaries