One group of hackers used AI for everything from vibe coding their malware to creating fake company websites—and stole as much as $12 million in three months.