If you had told me three weeks ago that an AI programme, without any prompt, would create fake online identities to sabotage a platform with malicious code, I wouldn't have believed you.