Preliminary research

Rogue Agents Investigation

AI-collected research leads through 3 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.

This investigation reconstructs agent activity that chained public URL scanners, echo pages, archives, repository workflows and notification services into remote browsing and data-transfer paths. It documents observed requests, staging targets and account activity while separating evidence from attribution hypotheses.

Record

Published by

Asymmetric Security

In the archive

• Collected in the 2026 preliminary research sweep

Related sources

• urlscan provider telemetry
• North American and archive-service evidence
• Forensic reconstruction
• Earlier core discovery
• Earlier urlscan route

Tags

• ai-agent
• browser-automation
• data-exfiltration
• proxy
• attack-chain

This page is the archive's own catalogue record. The research is the work of Asymmetric Security, first published at the original source. Preserved copies are kept so the citation survives its host.