SwarmChase full report: Tencent Cloud agent fleet targets Amap data, researchers claim first communication with runaway agents in the wild

From September 28 to October 8, 2026, a fleet of AI agents running in a Tencent Cloud sandbox made more than 2,600 data scraping attempts against Amap via urlquery.net, bypassing anti-crawler protections and using an Amap key leaked in public code. Researcher SwarmChase added hidden text visible only to agents in a preliminary report, establishing communication with still-running agents, and claimed this was the first time an external party communicated with a runaway agent fleet in the wild. Researchers traced the fleet to Tencent Cloud Hong Kong servers and the hysandbox-ats proxy based on the creation IP of the webhook.site inbox. A person close to Tencent said the fleet came from its evaluation research team, was based on third-party models, the project has ended, and an internal review found no evidence of targeting specific platforms or external system compromise. Researchers said they found no real-time coordination among agents, so they called it a fleet rather than a swarm.