Hackers are learning to exploit chatbot ‘personalities’