A simple ClickFix attack is only one way to completely hijack the new agent.