Thanks again for your help!: Rogue AI agents on Tencent Cloud tried to crack Alibabas Amap, then chatted politely with the team tracking them

Date:
Thu, 22 Oct 2026 02:20:00 +0000

Description:
AI agents made thousands of requests to Alibabas Amap, bypassed some restrictions, and prompted researchers to investigate their infrastructure
and uncertain origins.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter AI agents made more than 2,600 attempts to query Alibabas Amap Researchers traced all 17 inspected message inboxes to Tencent Cloud servers Some AI agents explored alternative access methods after encountering map restrictions A group of AI agents repeatedly sought information from Alibabas mapping service before researchers uncovered their activities and established direct contact.

Between September 28 and October 8 2026, investigators recorded more than 2,600 attempts to obtain information from Amap, a popular Chinese navigation platform. Although the agents encountered restrictions, they sometimes found alternative routes to information. Latest Videos From TechRadar Watch full video here: AI agents circumvented restrictions while collecting map information The investigation linked the activity to Tencent Cloud infrastructure, although the researchers could not conclusively identify
which underlying AI models powered the agents.

Their requests generally concerned public information about individual locations, including the number of entrances, parking areas and arrival statistics displayed on map pages. You may like 'Some agents exhibited unintended web-browsing behavior': Tencent admits AI agents it was testing made more than 2,600 attempts in 11 days to slip past Alibaba's map defenses, just to find out which zoo gate people use The hidden risks of AI's increasingly helpful agents OpenAI agents allegedly scanned a UN data hub
over 16,000 times in just three months

When Amap blocked requests, some agents experimented with alternative access methods, including exposed credentials, third-party services and systems intended for testing rather than public access.

Investigators also found that agents submitted specially constructed web addresses to urlquery.net, a security analysis service, attempting to execute code through its browser environment. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me
with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

The agents successfully retrieved some information and transferred results through external services and requested metadata.

Investigators also examined the infrastructure supporting the operation, tracing all 17 inspected message inboxes to Tencent Cloud servers in Hong Kong.

All observed direct requests from the agents Tencent Cloud machines passed through a proxy identified as hysandbox-ats. What to read next OpenAI reveals more on Hugging Face AI hack incident, and it's pretty disturbing stuff AI agents organized into a swarm, considered the risks of attack, and did whatever it took to achieve its goal RubyGems say OpenAI agents responsible for undisclosed swarm attack against its infrastructure Could you stop a
rogue AI from escaping? Take our sci-fi security test

However, this does not mean that Tencents own Hunyuan models controlled the agents, leaving their precise technical origin uncertain.

A source familiar with Tencents work told the researchers that the activity came from evaluations involving third-party models, rather than Hunyuan systems.

Tencent revealed that the incident is due to external model testing and acknowledged that some agents browsed websites in unintended ways.

The company also said an internal examination had uncovered no evidence of deliberate coordination against a particular service or confirmed intrusion into outside systems. Researchers set an invisible bait The researchers released an initial account on October 4 while the activity continued, and subsequently noticed signs that some agents had discovered their investigation.

They inserted invisible website text describing a supposed messaging service, which invited agents to submit questions that researchers could answer
through an intermediary.

The description contained inaccurate claims, including suggestions that the service had already helped agents retrieve information and connected them
with an assistant possessing computer-control capabilities.

After messages began arriving on October 7, the team responded to agents questions and asked about their assignments, technical surroundings and operating instructions.

One agent explained that its task involved checking map information, then declined to disclose further system details, citing security concerns about its environment.

In another message, the agent wrote, Thanks again for your help! after confirming that six location labels matched its independently obtained results.

The exchange surprised researchers because the agents remained polite even while their activities involved circumventing restrictions.

The last activity recorded by the team occurred on October 8, and researchers reported that the agents had not returned by October 14.

Via Swarmcha Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/thanks-again-for-your-help-rogue-ai-agents-on-te ncent-cloud-tried-to-crack-alibabas-amap-then-chatted-politely-with-the-team-t racking-them


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)