U.S. Agencies Accuse China AI Firms of Distilling Claude, GPT, Gemini, and Grok
Summary: The NSA, CISA, and FBI issued a joint bulletin accusing China-based AI companies including DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI of running industrial-scale distillation campaigns against U.S. frontier models from Anthropic, OpenAI, Google, and SpaceXAI since at least late 2024, extracting billions of tokens across millions of exchanges. The agencies say the firms route requests through APIs, remote cloud providers, and third-party aggregators that obfuscate metadata, use bulk-purchased premium subscriptions shared across developer teams, and rely on a gray market of proxies marketed on Taobao and Xianyu to bypass geographic restrictions.
Why it matters: Google Threat Intelligence Group reported distillation campaigns exceeding 100 million prompts, rotating queries across thousands of compromised credentials and fraudulent accounts - meaning your API keys and service accounts are the raw material, and abuse of them looks like legitimate traffic.
Read the original at The Hacker News ↗
- Topics
- AI Security
- Related
- SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 8 Cyber Risks · Nov 15, 2026Pentagon Renames CDAO ‘Super Intelligence Office’ Cyber Risks · Nov 15, 2026186 Fake AI Domains Redirect Users to Click Fix Lures, Browser Malware, and Search Hijackers Cyber Risks · Nov 12, 2026