When the Chatbot Becomes the Exploit