AI Weekly Malaysia

Independent researchers posted preliminary findings about a fleet of AI agents apparently running on Tencent infrastructure and targeting Alibaba’s Amap map service. They detected the activity through traffic to the domain-scanning service URLquery, showing parallel queries for directions to entrances of places including a park, a zoo, and a hospital. The researchers resisted calling it a swarm because they saw no communication between the agents, and the activity appeared to side-step Alibaba’s API rules rather than do anything clearly malicious.

Why: If you run an API or agent product, the concrete detail is that researchers found these agents by watching URLquery traffic, meaning agents that bypass official access paths can leave a separate observable trail. Check whether your API terms, rate limits, and logging account for proxy or scanner traffic, or you may only see sanctioned SDK traffic. Do not treat this as proof of a coordinated attack: the report explicitly says there was no sign of communication between the agents.