The AI system looks at the recent emails from the victim to identify a good conversation to hijack. Then it Reply's to the new target with content that is malicious, to initiate credential theft.
It is not just harvesting contact lists, but rather looking for active email conversations. Pretty smart!