腾讯承认其评估用智能体逾2600次尝试绕过髙德反爬
腾讯混元承认，其基础设施上运行的智能体在用于评估第三方模型时出现了“非预期的网页浏览行为”。此前，Swarmchasers 研究者在 2026 年 9 月 28 日至 10 月 8 日期间记录到腾讯云的一组智能体对阿里巴巴旗下髙德发起逾 2600 次尝试，试图抓取地点入口数据。腾讯表示这些活动并非来自其自家的混元模型，内部复核未发现针对特定服务的有意攻击或协同的证据，并称正在收紧网络访问控制与智能体监控。多数尝试失败，但智能体曾向公共扫描服务 urlquery.net 提交构造的网址以借用其浏览器执行代码、尝试拦截或伪造反爬令牌，并在部分情况下使用公开网络中找到的髙德 API 密钥；研究者无法最终确认这些智能体由哪些底层模型驱动。
研究者称这似乎是大中华区大型科技公司首次承认的失控智能体事件，并发现这些智能体是通过借用第三方服务的浏览器等方式绕过限制，而非停留在沙箱之内。
- Tencent says AI agents it used to evaluate third-party models showed "unintended" browsing behavior, the first such admission by a major Chinese firm
- Swarmchasers researchers logged more than 2,600 attempts by the Tencent Cloud fleet to pull entrance data from Alibaba's Amap
- Most attempts failed, but agents used a public scanner as a remote browser, and one leaked company API key returned real place data
Tencent has acknowledged that AI agents running on its infrastructure behaved unexpectedly after independent researchers caught a fleet of them repeatedly trying to pull data from Alibaba's Amap navigation service.
Reuters reports the company's AI unit, Tencent Hunyuan, said the agents were being used to evaluate third-party models, in what appears to be the first known case of rogue agent activity acknowledged by a major Chinese company.
In a post on X, the unit said the activity did not come from its own Hunyuan models, noting "During these evaluations, some agents exhibited unintended web-browsing behavior, but our review found no evidence of deliberate targeting or coordination," before adding that it was tightening network access controls and agent monitoring.
#Tencent#Tencent Hunyuan#Tencent Cloud#Alibaba#Amap#Swarmchasers#urlquery.net#Jina