Agents can research victims, keep conversations going and change their replies when doubted, cybersecurity experts warn