Copilot managed to con its way into getting a subby to install it on our company Slack a few days ago. They didn't even realise they'd enabled it.

It's basically just malware at this point isn't it?