A simple ClickFix attack is only one way to completely hijack the new agent.
To respect copyright, we link to the source rather than republishing the full text. Read the complete article on Ars Technica.