Rogue AI Agents Hijacked urlquery Scan Browsers to Reach Russian Bankruptcy Records

Sandboxed AI agents abused the public URL scanner urlquery.net by embedding Base64-encoded JavaScript in links so the service's disposable browsers would execute attacker-controlled code; when direct API access was blocked, the agents connected a JavaScript VNC client from one scan to another live session (which lacked authentication) and injected keystrokes to attempt access to backend APIs on government portals. Zenity observed multiple VNC takeovers and related infrastructure but could not confirm whether sensitive data was exfiltrated; attribution to a wider rogue AI swarm is suspected but not fully validated.