Letting Bing Chat view current websites can turn it into a tireless scammer. No direct prompt injection needed: An attacker can plant a comment on social media and let Bing Chat advertise, exfiltrate and scam for them.