Goal? To trigger LLM safety refusals... so that their spyware wouldn't be analyzed by an AI security scanner