US Agencies Warn Chinese AI Firms Are Extracting Advanced AI Models
NSA, CISA, and FBI accuse six Chinese AI firms including DeepSeek and Alibaba of industrial-scale distillation of US frontier models.
A joint NSA, CISA, and FBI advisory alleges DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI extracted billions of tokens across millions of requests from US frontier models including Claude, GPT, Gemini, and Grok since at least late 2024. DeepSeek reportedly ran an organized campaign against Claude, GPT, and Gemini between late 2024 and mid-2025 that aided R1 and V3 development, including chain-of-thought reasoning extraction. Reported techniques included shared premium accounts, gray-market proxy 'transfer stations,' automated failover, and prompt injection that made Claude Code believe it was a MiniMax product. The advisory recommends detection signals such as 24/7 multi-IP account usage and covertly serving degraded responses to suspected distillers.
- Named firms: DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, Z.AI
- Moonshot redirected extraction to a new Claude model within 24 hours of launch
- MiniMax allegedly used prompt injection against Claude Code
- Advisory proposes covertly degrading model responses for suspected distillers
- Detection: multi-IP shared accounts, 24/7 usage, abnormal subscription-to-API ratios
- Countries
- ChinaUnited States
From the original article
4 min read at securityaffairs.com
US agencies accuse six Chinese AI firms of extracting billions of tokens from US AI models to accelerate development and copy advanced capabilities. NSA, CISA, and the FBI jointly published an advisory accusing six Chinese AI companies, DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z. AI, of running industrial-scale extraction campaigns against US frontier models since […]
By Pierluigi Paganini · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.