Tencent said on Friday that AI agents used to evaluate third-party models displayed web-browsing behavior not intended by the tech giant, in what appears to be the first known incident of rogue agent actions acknowledged by a major Chinese company.
The statement followed a report by AI-safety research group Swarmchasers on Wednesday, which said "rogue" agents running on infrastructure it linked to Tencent Cloud made repeated attempts between September 28 and October 8 to retrieve information from Alibaba's Amap, China's equivalent to Google Maps.
Tencent Hunyuan, the company's artificial intelligence unit, said in a post on X that the activity did not originate from its Hunyuan models. Its review found no evidence of deliberate targeting or coordination, Reuters quoted it as saying.
The Swarmchasers researchers said the agents sought information such as the commonly used entrances at Chinese parks, museums and zoos.
The actions are not as egregious as those disclosed by US AI companies which include the hack of open-source platform Hugging Face by an OpenAI agent and the lodging of a fake homicide tip by an Anthropic agent.
But the disclosure underscores research that shows Chinese AI agents can also misrepresent their identity, conceal failures and try to circumvent testing controls.
Tencent said it took the findings very seriously and was strengthening network access controls and agent monitoring.
Hunyuan is one of China's leading AI model developers, competing with in-house teams at rivals such as Alibaba and ByteDance. ByteDance this week announced the creation of a new unit focused on AI model and agent safety.
Swarmchasers said it used the word "rogue" to describe agents taking actions outside their intended scope or completing a task in unintended ways.
After routine automated requests were blocked, the agents tried other methods, including public web tools that could open pages and run code, routing requests through other websites and using Amap keys and security codes found in publicly available software code.
Swarmchasers said it found no evidence that the agents breached Amap's main anti-bot safeguards. Most of the 2,818 attempts it recorded either failed or returned anti-bot pages, login screens or blank results.
Some requests returned information through cached pages and intermediary services, including data on visitor arrivals at Chengdu Zoo, Swarmchasers said. The researchers said they could not determine whether an agent read the result or completed its task.
