The AI support bot added a hacker's email, sent a verification code, and offered a password reset button. No access to the victim's email was needed.