CISA Warns Chinese AI Firms Extract Billions of Tokens From Claude, GPT, Gemini and Grok
CISA, NSA and FBI advisory says six Chinese AI firms extracted billions of tokens from Claude, GPT, Gemini and Grok via API proxies since late 2024.
A joint advisory from CISA, NSA and FBI alleges China-based AI companies including DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun and Z.AI harvested billions of tokens across millions of exchanges from Claude, GPT, Gemini and Grok variants since late 2024. Operators allegedly used API proxy 'transfer stations', account pools, bulk premium subscriptions and prompt injection or jailbreak-style requests to force models to reveal chain-of-thought reasoning. DeepSeek's R1 and V3 and Moonshot's Kimi-K2 and Kimi-K3 models reportedly benefited from the extracted data. CISA urged providers to add identity checks, monitor subscription-to-usage ratios, rate limit, and share infrastructure signals with cloud platforms.
- Six Chinese firms named: DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, Z.AI.
- Campaigns ran from late 2024, reportedly with Chinese government awareness.
- API proxies called 'transfer stations' masked identities and bypassed geographic controls.
- Prompt injection and jailbreak-style prompts extracted hidden chain-of-thought reasoning.
- Advisory urges identity checks, usage monitoring, rate limits and intelligence sharing.
- Countries
- United StatesChina
From the original article
3 min read at cybersecuritynews.com
A new U. S. government advisory has raised concerns over large-scale attempts to copy the capabilities of leading artificial intelligence systems.
By Tushar Subhra Dutta · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.