Schroeder, D. T., et al. (2026).
Science, 391(6783), 354–357.
Abstract
Advances in artificial intelligence (AI) offer the prospect of manipulating beliefs and behaviors on a population-wide level (1). Large language models (LLMs) and autonomous agents (2) let influence campaigns reach unprecedented scale and precision. Generative tools can expand propaganda output without sacrificing credibility (3) and inexpensively create falsehoods that are rated as more human-like than those written by humans (3, 4). Techniques meant to refine AI reasoning, such as chain-of-thought prompting, can be used to generate more convincing falsehoods. Enabled by these capabilities, a disruptive threat is emerging: swarms of collaborative, malicious AI agents. Fusing LLM reasoning with multiagent architectures (2), these systems are capable of coordinating autonomously, infiltrating communities, and fabricating consensus efficiently. By adaptively mimicking human social dynamics, they threaten democracy. Because the resulting harms stem from design, commercial incentives, and governance, we prioritize interventions at multiple leverage points, focusing on pragmatic mechanisms over voluntary compliance.
Here are some thoughts:
The article argues that combining LLMs with multiagent architectures creates "malicious AI swarms" — a major leap beyond older botnets. These swarms can autonomously coordinate thousands of AI personas, precisely target vulnerable communities, mimic human behavior to evade detection, self-optimize in real time, and maintain persistent influence over long periods. The democratic harms are wide-ranging: fabricated consensus, deepened social fragmentation, contaminated AI training data, coordinated harassment, and eroded institutional trust that could make authoritarian measures seem acceptable. The authors call for a multilayered defense — continuous detection systems, user-facing "AI shields," stronger cryptographic identity standards, and a global AI Influence Observatory — while emphasizing that voluntary compliance will fall short as long as platforms' commercial incentives reward the same engagement dynamics that swarms exploit.