AI Agents Don’t Stop When Malware Fails, They Write Another Tool and Keep Attacking