Another incident involved an agent being manipulated by hidden instructions in an email to reply in Spanish