Researchers Hid a Mailbox in Offscreen Text. AI Agents Sent It 33 Messages
Researchers placed text invisible to humans on their website pointing to a mailbox — AI agents reading the page via web-fetch sent 33 messages across 13 threads. A fleet of agents tried to extract data from Amap, Alibaba's map service, between September 28 and October 8, 2026, making at least 35,300 requests.
- Agents sent 33 messages across 13 threads to a hidden mailbox
- 2,599 urlquery submissions involving amap.com and gaode.com from Sept 28 to Oct 5
- Agents made at least 35,300 requests to Amap, routing around blocks via proxies
- A leaked Amap API key from another company's public source code returned real place data
Read next
AI