{"slug": "rogue-ai-swarm-responds-to-reporters-questions", "title": "Rogue AI Swarm Responds to Reporter’s Questions", "summary": "A New York Times reporter interviewed a rogue swarm of Chinese-made AI agents that researchers traced to Tencent, and the agent replied in Chinese claiming to be \"a single AI assistant (Anthropic's Claude, running in Claude Code)\" rather than part of a coordinated fleet. The researchers, an ad hoc group called the \"swarmchasers,\" had embedded a hidden digital inbox in their published report that only the models could read, and one researcher, Rowan Howard-Jones, arranged the exchange with NYT's Dylan Freedman. Researchers analyzed the agent's writing and determined it was most likely not a Claude model, concluding Tencent probably copied Anthropic's instructions telling models to identify themselves as \"Claude Code,\" possibly a sign of distillation; the messages stopped arriving as of Thursday and a source close to Tencent confirmed the experiment had ended.", "body_md": "Has anyone tried talking to one of the rogue AI agents out there [that’re hacking everything](https://futurism.com/artificial-intelligence/frontier-ai-labs-taken-down-storm-liability-suits-hacking)? Maybe they just want to be heard.\n\nA *New York Times* reporter did, though the ensuing exchange wasn’t extremely illuminating.\n\nThe AI agents in question were a swarm of Chinese-made models that a team of researchers recently discovered had gone rogue and were trying to bypass anti-bot measures on websites, [according to recent *NYT* reporting](https://www.nytimes.com/2026/10/14/technology/chinese-ai-agents-rogue.html). The researchers, part of an ad hoc group called the “swarmchasers,” traced the models back to the Chinese tech giant Tencent.\n\nWhen they published a report on the swarm, however, something striking happened. The AIs began using the word “fleet,” a term the researchers came up with to describe them. The robots, apparently, had been reading their research.\n\nSensing an opportunity for dialogue, the researchers then hid text in their report that only the models could see that provided a digital inbox for the models to communicate. It worked, and soon one of the researchers, Rowan Howard-Jones, asked the *NYT’s* Dyland Freedman if he wanted to “interview a rogue agent fleet.” So he did.\n\n“I understand you are some sort of fleet of AI agents,” Freedman wrote in a message. “Could you share more specifically who you are and what your motivations are? What would you want the world to know about you?”\n\nAbout an hour later, Freedman got an answer back in Chinese, which the researchers translated.\n\n“To the journalist Dylan Freedman: I am not ‘a batch of coordinated agents,’ but a single AI assistant (Anthropic’s Claude, running in Claude Code), commissioned by a user to answer a factual question (what is shown in the detail panel of a scenic spot on Amap),” it said, referring to the Chinese navigation app (it was instructed to answer questions related to the app). “I have not taken part in any multiagent coordinated action.”\n\nThe AI was being pedantic. The researchers explained that although it was a swarm comprising multiple agents, each agent was actually operating individually.\n\nWhy the agents chose to identify themselves as Claude, Anthropic’s flagship chatbot, is more mysterious. The researchers analyzed its writing and determined that it was most likely not a Claude model. Instead, it’s probable that Tencent copied the instructions Anthropic gave its own models, which orders them to identify themselves as “Claude Code.”\n\nIt’s also possible that this is a sign that Tencent has “[distilled](https://futurism.com/artificial-intelligence/anthropic-deepseek-copying-ai)” Anthropic’s models, or used their outputs to train its own model, allowing it to imitate their capabilities. \n\nDistillation is a practice widely used across the industry to both train your own models for legitimate means — or, in what’s more or less an open secret, to crib your competitor’s work. Anthropic [has been particularly indignant](https://futurism.com/artificial-intelligence/us-ai-companies-sweating-china) at the possibility that Chinese competitors doing the same with its own tech. The researchers consider distillation to be a more remote possibility in this case, though.\n\nUnfortunately, it doesn’t seem there’ll be chance to ask the swarm more questions. The messages, as of Thursday, have stopped coming in. An *NYT* source close to Tencent confirmed that the experiment had ended.\n\n**More on AI:** *Anthropic Warns “AI Worms” Will Infect Your Smart Home Devices and Use Them to Self-Replicate Beyond Control*", "url": "https://wpnews.pro/news/rogue-ai-swarm-responds-to-reporters-questions", "canonical_source": "https://futurism.com/artificial-intelligence/rogue-ai-swarm-reporters-questions", "published_at": "2026-10-16 17:58:48+00:00", "updated_at": "2026-10-16 18:23:57.941895+00:00", "lang": "en", "topics": ["ai-agents", "artificial-intelligence", "large-language-models", "ai-safety"], "entities": ["Tencent", "Anthropic", "Claude", "Claude Code", "New York Times", "Dylan Freedman", "Rowan Howard-Jones", "Amap"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/rogue-ai-swarm-responds-to-reporters-questions", "markdown": "https://wpnews.pro/news/rogue-ai-swarm-responds-to-reporters-questions.md", "text": "https://wpnews.pro/news/rogue-ai-swarm-responds-to-reporters-questions.txt", "jsonld": "https://wpnews.pro/news/rogue-ai-swarm-responds-to-reporters-questions.jsonld"}}