With the extensive use of AI in various fields, the issue of AI security has become more significant. The AI data poisoning attacks will be the most threatening approach against AI security after the adversarial examples. As the continuous updating of AI applications online, the data pollution models can be uploaded by attackers to achieve a certain malicious purpose. Recently, the research on AI data poisoning attacks is mostly out of practice and use self-built experimental environments so that it cannot be as close to reality as adversarial example attacks. This article's first contribution is to provide a solution and a breakthrough for the aforementioned issue with research limitations, to aim at data poisoning attacks that target real businesses, in this case: data poisoning attacks on real Go AI. We install a Trojan virus into the real Go AI that manipulates the AI's behavior. It is the first time that we succeed in manipulating complicated AI and provide a reliable approach to the AI data poisoning attack verification method. The method of building Trojan in this article can be expanded to more practical algorithms for other fields such as content recommendation, text translation, and intelligent dialogue.