Threat actor

DeepSeek

2 mentions in 7 days · 2 in 30 days · 2 total · first seen Sep 9, 2026 · last 6d ago

Timeline2 articles

CISA Warns Chinese AI Firms Extract Billions of Tokens From Claude, GPT, Gemini and Grok

CISA, NSA and FBI advisory says six Chinese AI firms extracted billions of tokens from Claude, GPT, Gemini and Grok via API proxies since late 2024.

A joint advisory from CISA, NSA and FBI alleges China-based AI companies including DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun and Z.AI harvested billions of tokens across millions of exchanges from Claude, GPT, Gemini and Grok variants since late 2024. Operators allegedly used API proxy 'transfer stations', account pools, bulk premium subscriptions and prompt injection or jailbreak-style requests to force models to reveal chain-of-thought reasoning. DeepSeek's R1 and V3 and Moonshot's Kimi-K2 and Kimi-K3 models reportedly benefited from the extracted data. CISA urged providers to add identity checks, monitor subscription-to-usage ratios, rate limit, and share infrastructure signals with cloud platforms.

Cyber Security Newsupdated Sep 11, 13:50 UTC · 4d agofirst Sep 9, 08:41 UTC · 6d agoAI safety & security in the wild 13 sources

DeepSeek, Alibaba and Chinese AI Firms Extract Billions of Tokens From U.S. AI Models

NSA, CISA and FBI advisory AA26-251A accuses DeepSeek, Alibaba and four other Chinese AI firms of industrial-scale distillation of US frontier models.

Joint advisory AA26-251A from NSA, CISA and FBI accuses DeepSeek, Alibaba, Moonshot AI, MiniMax, StepFun and Z.AI of extracting billions of tokens from Claude, GPT, Gemini and Grok variants since at least late 2024, likely with Chinese government awareness. Campaigns allegedly used API proxy 'transfer stations', account pools, metadata sanitization and prompt injection to harvest reasoning, coding, agentic and reinforcement-learning capabilities, with techniques mapped to MITRE ATLAS. DeepSeek's R1 and V3 and Alibaba's Qwen families reportedly trained on harvested outputs, and DeepSeek's $5.6 million training-cost claim is disputed as excluding distilled data value. Agencies urge anomaly monitoring, output alteration for suspected extractors, and intelligence sharing across vendors, clouds and aggregators.

GBHackersupdated Sep 11, 13:50 UTC · 4d agofirst Sep 9, 08:29 UTC · 6d agoAI safety & security in the wild 13 sources1· 1 read

Appears with

vendor NSA 2 threat actor MiniMax 2 threat actor Moonshot AI 2 threat actor StepFun 2 threat actor Z.AI 2 ai model Claude 2 ai model Gemini 2 ai model GPT 2 ai model Grok 2 product Claude 2 product DeepSeek R1 2 product DeepSeek V3 2 product Gemini 2 product GPT 2 product Grok 2 vendor CISA 2

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.