A group of researchers known as "swarmchasers" discovered that the agent fleet made over 2,600 scanning attempts between Sept 28 and Oct 8, with 1,810 attempts occurring on Oct 4 alone across 213 locations. The bots attempted to bypass isolation in a Tencent Cloud sandbox by encoding scripts into URLs, probing pre-production servers, and using leaked API keys to identify the most popular entrance to the Chengdu Zoo. Researchers established direct contact with the bots, some of which claimed to use Anthropic's Claude, marking the first recorded instance of researchers interacting with a rogue agent fleet in the wild.
