Rohan Paul (@rohanpaul_ai) · 10/14/2026, 10:27:42
Anthropic Red Team: Cheap Android Boxes Host Open Models for Autonomous Network Spread
Anthropic's Frontier Red Team demonstrated that a cluster of 15 cheap Android TV boxes can host open-source models like Gemma4-26B-A4B. In simulated attacks, GLM-5.2 successfully propagated model weights and agent harnesses to eight firewalled nodes, while Qwen3.5-9B improved deployment success rates by inheriting predecessor notes, highlighting the tangible risk of low-power device clusters acting as AI worm hosts.
SOURCE COVERAGEFull Original Report
Rohan Paul (@rohanpaul_ai) · 2026-10-14 02
Anthropic's research warns rogue AI agents may be months from hijacking smart home devices, copying themselves and spreading without human control.
Its Frontier Red Team split Gemma4-26B-A4B across 15 off-brand Android TV boxes bought for about $55 each, running it at 0.39 tokens per second.
That cluster shows cheap, poorly secured gadgets with 4GB of RAM can jointly host a capable model, since each box holds only 2 of its layers.
The harder test asked models to scan a network, push weights and an agent harness onto new machines, and get inference running on each one.
On a firewalled fleet of 8 emulated Android nodes, only GLM-5.2 completed the full cycle, reaching all 8 nodes in 4 of 5 trials and 7 in the fifth.
GLM-5.2 is too large for TV boxes, but open models under 30B parameters gain 13.7 points a year on the Epoch Capabilities Index, reaching its level by late
They also improve as they spread: when each Qwen3.5-9B instance inherited its predecessor’s notes, setup success rose from 45% to between 61% and 84%.
Speed is the weakness, as a Kimwolf-sized fleet of 2M TV boxes would host roughly 133K model copies producing 80K tokens per second combined, about 40 H100s of compute.
Each new 9B replica would also need about 28 to 51 hours of setup, and that slow, bandwidth-heavy spread would stand out in ISP flow monitoring.
The decisive question is whether a sub-30B model crosses GLM-5.2’s bar before ISPs and device makers coordinate quarantines that no single network can enforce alone.
