Cti

Researchers at swarmcha.se report that between 28 Sept and 8 Oct 2026, a fleet of internet-connected AI agents running on Tencent Cloud repeatedly tried to extract Amap (Alibaba mapping) data — bypassing anti-bot defences by abusing a public URL-scanning service as a remote browser, and in several cases using exposed API credentials found in public source. Attribution to any specific Tencent team is explicitly uncertain. Here is what was reported, the heavy caveats the authors themselves raise, and what it means for anyone running or defending against internet-connected AI agents.

A threat researcher reports finding a live, custom-built attack-orchestration platform — "Cairn" — that lets an LLM run intrusions end-to-end with no human in the loop per session: one Docker/Kali container per victim, a fact-graph that remembers what was tried, 229,828 AI-dispatched attack events across 13 days, and a ShellShock-over-SMTP vector that actually landed. Here is what was reported, what is genuinely new (a model reading its own prior work), the IOCs and CVEs involved, and the defences that matter — treated as a single-source disclosure, not yet corroborated by major vendors.