Security experts warn of ‘recursive scam optimization’ as defenders outsmart themselves