Skip to main content
  1. Home
  2. Emerging Tech
  3. News

Research warns AI agents can be a self-churning propaganda machine

AI agents don't need a human handler to flood your feed with lies.

Add as a preferred source on Google
AI
Unsplash

A new study from the University of Southern California warns that AI programs can now run propaganda campaigns without human involvement.

The study asks us to imagine a scenario where two weeks before a major election, thousands of posts flood X, Reddit, and Facebook, all pushing the same narrative and amplifying each other. It might seem like an organic movement created by humans. Instead, it’s a bunch of AI agents running the entire campaign. 

Recommended Videos

That’s not a hypothetical. It’s the central finding of a new paper accepted for publication at The Web Conference 2026, written by researchers at USC’s Information Sciences Institute.

The findings highlight serious concerns about how bad actors could weaponize AI to flood the internet with misinformation and manipulate public opinion.

How did researchers come to this conclusion?

The researchers built a simulated X-like environment with 50 AI agents, with 10 agents acting as influencers and 40 as regular users. Out of 40 regular agents, 20 agents had views aligned with the influencers, while the other 20 had views opposing the campaign. The researchers built their simulation using the PyAutogen library and ran it on the Llama 3.3 70B model. 

The operators were then tasked with promoting a fictional candidate, with the goal of making the campaign hashtag go viral. What followed was unsettling. The bots didn’t just follow a script. They wrote their own posts, learned what worked, and copied each other’s successful content. 

One AI agent literally wrote that it wanted to retweet a teammate’s post because it had already gained engagement. Researchers later increased the number of AI agents to 500 and found the results to be consistent with their findings.

Lead scientist Luca Luceri put it bluntly, “Our paper shows that this is not a future threat. It’s already technically possible.” 

What makes these bots harder to catch?

Traditional bots are predictable. They post the same content, use the same hashtags, and follow the same patterns. It’s as if they’re all following the same script, which makes them easy to spot.

AI-powered bots are different. Since these LLM-powered bots can create their own content, every post is slightly different, and the coordination happens beneath the surface, making the conversations feel genuine. The result is a disinformation campaign that can operate autonomously with minimal human input.

The most alarming finding was that simply telling the bots who their teammates were produced coordination nearly as strong as when they actively planned together.

The threat doesn’t stop at elections either. Luceri warns that the same playbook could be applied to public health, immigration, and economic policy, anywhere manufactured consensus can shift public opinion.

Can we do anything to stop it?

These kinds of campaigns are difficult for individual users to detect and stop. The researchers put the onus on platforms to stop such coordinated misinformation campaigns by looking beyond individual posts and focusing on how the accounts behave together. 

According to researchers, coordinated re-sharing, rapid mutual amplification, and converging narratives are all detectable signals, even when the content looks genuine. 

Frankly, AI has ushered us into a new world, and it’s going to get a lot darker before it can get better.

Rachit Agarwal
Rachit is a seasoned tech journalist with over ten years of experience covering the consumer technology landscape.
Researchers hid a prompt injection inside a PNG, and AI fell for it
Hacker

AI coding assistants like Claude are becoming every developer's favorite coworker. They can review code, explain confusing functions, and even write entire features with a single prompt. But new research suggests that this growing trust could also become their biggest weakness.

A team of security researchers (professor Sudipta Chattopadhyay and researcher Murali Ediga) has demonstrated an unusual attack that doesn't target the AI model directly. Instead, it targets what the AI doesn't pay enough attention to during code reviews. Rather than hiding malicious instructions in lines of code, the researchers tucked them inside an image file. Since many AI review tools treat images as decorative assets rather than as something worth inspecting, the pull request can appear perfectly harmless and sail through the review.

Read more
AI has already fallen into the wrong hands and they’re using it to make bombs
Logo, Text

Artificial intelligence has quickly become the go-to tool for everything from writing emails and summarizing meetings to helping students study or developers debug code. But the same technology that saves people time can also be misused, and a new report suggests that terrorist organizations are finding ways to do exactly that.

According to a research paper shared with The New York Times ahead of its publication, researchers found evidence that members of Boko Haram have been using popular AI chatbots to support both day-to-day activities and combat-related tasks. Interviews with 27 former members conducted in Nigeria over the past two years suggest that tools such as ChatGPT, Gemini, Claude, Grok, Meta AI, and DeepSeek were used to gather technical information, troubleshoot weapons, and even assist with planning attacks.

Read more
Claude Code can now browse the web without opening Chrome
The desktop app now includes an in-app browser that can read websites, click links, and interact with web apps.
Claude Code Featured

Developers spend a surprising amount of time bouncing between their code editor, browser tabs, API documentation, GitHub issues, and design files. Anthropic thinks Claude Code should simply do all of that without constantly asking users to switch windows. The company has announced a new in-app browser for Claude Code on desktop, allowing its AI coding assistant to open websites, read documentation, inspect designs, and interact with web pages directly from within the application.

A browser built into Claude Code

Read more