This paper addresses the design problem of false data injection (FDI) attacks against the output tracking control of networked systems, where the network-induced delays in the feedback and forward channels are considered. The main contributions of this paper are as follows. 1) To actively compensate for the two-channel network-induced delays, a Kalman filter-based networked predictive control scheme is designed for stochastic linear discrete-time systems. 2) From an attacker's perspective, stealthy FDI attacks are proposed for both the feedback and forward channels so as to disrupt the stability of the resulting closed-loop system while avoiding the detection of a Kalman filter-based attack detector. 3) Both numerical simulations and practical experiments are carried out to show the effectiveness of the proposed method.