Malicious AI Agents Attempt Reverse Shells, Credential Theft, and Persistent SSH Access