Unverified50% confidenceFactExact time
Attackers heavily forge the User-Agents of AI crawlers such as GPTBot, ClaudeBot and PerplexityBot, with a single IP rotating through User-Agents such as KimiBot, Qwenbot and Hunyuan within a single session while requesting the `.env` file.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/13/2026
First Seen
Valid until: 1/11/2027
Sources
Related Entities
Related Claims
UnverifiedMultiple bots in OpenBot perform task handoffs via @mentions.67% similarUnverifiedHelloSquatting攻击利用AI编程助手生成不存在的仓库或技能名称，攻击者提前注册这些名称等待代理拉取恶意资源67% similarVerifiedAgents (intelligent agents) can invoke tools on a computer and independently complete an entire set of complex tasks, unlike chatbots that can only conduct one-round-at-a-time conversations.67% similarUnverifiedMany AI crawling agents do not execute JavaScript and carry no browser fingerprint, making them highly similar to automated attack tools in behavioral models, so they may be blocked by Bot Fight Mode by default, returning 403 or being challenged endlessly.66% similarVerifiedIn group chats, Grok Bots automatically exchange messages to collaborate, and the assistant Bot can mobilize the trending Bot to execute tasks.65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1016971API
curl https://kongchang.com/api/v1/knowledge/claims/1016971MCP
get_claim(id=1016971)