Or ai-agent-assisted attack, possibly directly using the hijacked infrastructure for inference.