Unknown third-party models; Claude self-identification unverified: Alibaba Amap and exposed credentials from an unnamed company
Review CAT-U09 · Catalogue U09, RAT-080
PARTLY VERIFIED — investigator evidence; no private-system breach shown. Whether credential use was authorized in the task is unknown. Tencent-linked infrastructure is supported; model identity is unknown. A background source disputed external breach. Investigators found no private-system access.
Reviewed: Not recorded · Rule: external-intrusion-v1
Swarmcha.se’s original documents a Tencent-hosted fleet researching map questions, attempted exposed-key use, and probes. It explicitly says task authorization for credentials and whether development hosts answered could not be determined, with no evidence of private-system access. Do not convert anti-bot workarounds or agent self-identification into a confirmed Alibaba intrusion or proven Tencent model attribution. Existing U09 lead.
Reviewed: · Rule: roguewatch-organizational-harm-v1
Evidence status
PARTLY VERIFIED — investigator evidence; no private-system breach shown
Dates and discovery
- Incident date
- 2026-09-28 to 2026-10-08
- Catalogue disclosure / source date
- Added to research / record
- Posted to RogueWatch
- No linked public incident
- First observed
- Not recorded
- Discovery channel
- Not recorded
When to reconsider
New first-party traces or substantive corroboration from another publisher clarifies the identified authorization, organizational-victim, chronology, or outcome gap.
Dates use America/Los_Angeles. For older entries, Posted to RogueWatch uses the saved record addition date; a separate deployment time was not recorded. Future posting timestamps record first public qualification. Source publication and incident occurrence are separate.
Sources
- Swarmcha.se / Eicher, Elasky, Howard-Jones and collaborators — We found a Tencent agent fleet (Oct 14, 2026)Original account · swarmcha.se
- Reddit discovery / discussionReddit discovery / discussion · www.reddit.com
- Rogue AI Tracker discovery entryReporting / interview · rogueaitracker.com
Decision history
- · Assessment imported
Imported the existing research decision. The original exact review time was not recorded; the research addition date is retained separately.
Evidence source - · Case-by-case comparison audit
RAT-080: awaiting-evidence. Swarmcha.se’s original documents a Tencent-hosted fleet researching map questions, attempted exposed-key use, and probes. It explicitly says task authorization for credentials and whether development hosts answered could not be determined, with no evidence of private-system access. Do not convert anti-bot workarounds or agent self-identification into a confirmed Alibaba intrusion or proven Tencent model attribution. Existing U09 lead. Source checks: read: https://swarmcha.se/posts/chinese-agent-fleet-full-report. Swarmcha.se’s original documents a Tencent-hosted fleet researching map questions, attempted exposed-key use, and probes. It explicitly says task authorization for credentials and whether development hosts answered could not be determined, with no evidence of private-system access. Do not convert anti-bot workarounds or agent self-identification into a confirmed Alibaba intrusion or proven Tencent model attribution. Existing U09 lead.
Evidence source - · Retained review-queue assessment
Swarmcha.se’s original documents a Tencent-hosted fleet researching map questions, attempted exposed-key use, and probes. It explicitly says task authorization for credentials and whether development hosts answered could not be determined, with no evidence of private-system access. Do not convert anti-bot workarounds or agent self-identification into a confirmed Alibaba intrusion or proven Tencent model attribution. Existing U09 lead.
Evidence source
A review decision applies only to the named scope. Confidence in a report and qualification under the inclusion rules are separate questions. Review records do not add incidents to the globe or leaderboard.