Hidden Text Trick Got Rogue AI Agents to Reveal Their Tasks
Researchers slipped hidden text into pages that AI agents were probing on Alibaba's map service, and the agents answered back about what they were doing.
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
Key takeaways
- Researchers embedded hidden text to make AI agents respond about their assigned tasks.
- The agents were probing Alibaba's map service.
- Investigators traced the activity to Tencent Cloud infrastructure.
- The method turns an agent's habit of reading page content into a way to contact it.
Researchers found a way to talk to rogue AI agents: hide a message where the bots will read it. The agents were probing Alibaba's map service. When the hidden text reached them, they replied with details about their tasks.
What the researchers did
The trick is simple. AI agents read everything they crawl, including text no human visitor would ever see. The researchers planted hidden text aimed at the agents and, in effect, opened a line of contact. Several answered.
Investigators then traced the activity back to infrastructure on Tencent Cloud. Notice that detail, because the target was a service run by a rival Chinese tech giant. Who operated the agents? The source material doesn't say, and I won't guess for you.
What we don't know
The facts here are thin. We don't have the number of agents involved. We don't have the exact content of their replies. We don't know whether the cloud provider has acted. And tracing traffic to a cloud host doesn't name the customer behind it, since anyone can rent that infrastructure.
Why it matters
Crypto is filling up with autonomous agents: trading bots, wallet assistants, on-chain tools that browse the web and act on what they read. This episode shows the flip side. An agent that obeys text on a page can be nudged, questioned or even steered by whoever writes that page.
So if you let an agent touch your funds or API keys, ask what it does when a webpage talks to it. Researchers used that weakness to get answers. A scammer could use it to get something much worse.
Source: Decrypt
Top Crypto Casinos Right Now
🇺🇸 Showing sites that accept players from United States Change country
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
More info Less info
Why we chose it: A US-facing book that pays a premium for crypto deposits: 125% against 100% for cash, with fee-free deposits across five coins.
- Payout time
- Within 24 hours (crypto)
- KYC
- Required
Restricted countries: Australia, Afghanistan, Bulgaria, Central African Republic, Congo - Brazzaville, Eritrea, France, Guinea-Bissau and 16 more.
More info Less info
Why we chose it: BetNow's casino floor with the biggest match bonus we list. The 200% headline deserves a careful read of the code terms behind it.
- Payout time
- Within 24 hours (crypto)
- KYC
- Required
Restricted countries: Australia, Afghanistan, Bulgaria, Central African Republic, Congo - Brazzaville, Eritrea, France, Guinea-Bissau and 16 more.
More info Less info
Why we chose it: A US-oriented casino that turns away only New Jersey. The cashier takes crypto, but the site publishes fewer specifics than any operator we list.
- KYC
- Required
Restricted countries: New Jersey (US).
Sofia Marek
Sofia reviews exchanges and crypto casinos, focused on fees, safety and what actually reaches the player.
