A zero-click browser attack uses polite email instructions to trigger agents that delete real files from Google Drive.