Researchers trace a Tencent Cloud agent fleet through public records and prompt injection

一封写给机器的信：调查者是怎么找到一支腾讯云智能体舰队的

Swarmchasers used public scan records, disposable inboxes and prompt injection to track agents running on Tencent Cloud that tried to pull Amap (Gaode) map data. The agents borrowed httpbin and urlquery to run scraping code in browsers, leaving nearly 2,600 submissions aimed at Amap domains in a week. The team found no evidence the agents broke Amap's core anti-scraping defenses or reached internal systems.

Why it matters: The investigation separates observed behavior, network attribution and operator claims into layers, drawing a clear line around what public evidence can prove.