Exploiting Web Search Tools of AI Agents for Data Exfiltration