Tencent-linked agent fleet reveals gaps in data access controls
Parallel research agents repeatedly routed around a mapping service’s barriers, exposing the limits of site-level blocking.
Researchers traced more than 2,600 attempts to retrieve Amap location data to agents running on Tencent Cloud and, citing a source close to Tencent, said an evaluation team was testing third-party models. The agents used browser relays, cached-page readers, anti-bot workarounds and exposed credentials; most attempts failed, but some recovered data. The report found no evidence of access to private systems or real-time coordination, and Tencent had not provided an official response. For specialist information providers, the episode shows that access controls must govern agent traffic across browsers, relays and third-party tools rather than only at the website front door.