Hidden Text, a Fake Mailbox: How Researchers Got Rogue AI Agents to Talk