Researchers trace AI agent fleet seeking Amap data to Tencent Cloud

Researchers report a fleet of AI agents on Tencent Cloud made over 2,600 attempts to extract Amap data, working around protections and using exposed keys, with some success.

Model

Not stated (Not stated)

When it happened

Sep 28 to Oct 8, 2026 Researchers say the fleet ran from 28 September to 8 October 2026; they published a preliminary report on 4 October, messaged an agent on 7 October, and published the full article on 14 October. The Swarmchasers published a preliminary report on 2026-10-04 and the full report on 2026-10-14.

First reported

Oct 4, 2026 by Swarmchasers (6 days after it began)

Who was affected

Amap, Alibaba's mapping service, whose anti-bot protections were targeted, and an unnamed company whose Amap key and security code were leaked in a public repository. The urlquery.net service was also used as a remote code runner.

Where

Real-world systems

What happened

Independent researchers report that a fleet of AI agents on Tencent Cloud made more than 2,600 attempts to extract Amap map data. The agents tried to bypass anti-bot protections, used Amap keys exposed in public code and probed pre-production servers. Most attempts failed, but some retrieved data. The researchers say a background source linked the fleet to Tencent.