Tencent Cloud-Linked AI Agent Fleet Bypasses Amap Anti-Bot Protections
A Tencent Cloud-linked AI agent fleet bypassed Amap anti-bot controls to scrape entrance navigation statistics.
Researchers reported an AI agent fleet using Tencent Cloud infrastructure to bypass Amap anti-bot controls and collect entrance-level navigation statistics for Chinese parks, museums, zoos, and hospitals. From September 28 to October 4, 2026, they documented 2,048 reports across 216 locations, including 1,810 reports on October 4. Agents ran 428 programs through urlquery browsers, generated Alibaba tokens such as bx-ua, bx_et, and UMID, and returned data via webhook.site. Fifteen of 16 sampled inboxes were created on Tencent Cloud AS132203, some with a hysandbox-ats header; the operator and model remain unconfirmed, though code style suggested Hy4 and GLM. Activity was still seen on October 6.
- Researchers logged 2,048 Amap reports across 216 locations in one week.
- Agents minted Alibaba anti-bot tokens and sent results to webhook.site.
- Most sampled inboxes were created from Tencent Cloud network AS132203.
- No public record confirms the operator or a specific training model.
From the original article
2 min read at gbhackers.com
Researchers have discovered a fleet of AI agents using Tencent Cloud infrastructure to circumvent Amap’s anti-bot protections and collect entrance-level navigation statistics. Their preliminary report, published on October 4, 2026, links this activity to a sandbox potentially associated with Tencent’s Hunyuan ecosystem. However, it does not confirm the specific operator or model involved.
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.