Attackers run AI agents that research your company, write the lure, and hold conversations. The only defense that keeps pace runs agents of its own.