China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies
China-based AI firms conduct industrial-scale knowledge distillation campaigns against US AI models.
US agencies NSA, CISA, and FBI have issued a joint advisory detailing how China-based AI companies, including DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI, are systematically extracting proprietary functionalities from US AI models through large-scale knowledge distillation. These campaigns, likely with Chinese government awareness, aim to accelerate their own AI development and bridge technological gaps by violating terms of service and using proxy networks to bypass restrictions. The advisory recommends enhanced detection, response alterations, and cross-organization intelligence sharing.
AI summary of the linked source. Not reviewed by an editor. How this works
Run NSA?
Get an email when a new story names NSA, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonChina-based AI companies are conducting industrial-scale knowledge distillation campaigns — systematically querying U.S. AI models at high volume to replicate proprietary capabilities — in likely coordination with the Chinese government. These actors exploit weak API access controls and use proxy networks to evade detection and circumvent terms-of-service restrictions. The threat matters because proprietary AI model behavior, training outputs, and emergent capabilities represent core intellectual property that, once extracted, cannot be un-disclosed. Without robust query monitoring and anomaly detection, organizations may have no visibility into ongoing exfiltration. This case underscores that AI APIs are high-value attack surfaces requiring the same rigor as any sensitive data endpoint.
What helps against this
How we list vendors
- Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
- Threat intelligence
Attack campaigns reach your sector, suppliers or software before your team hears about them.
- AI application security
Prompt injection, data leaks through AI tools and unapproved AI use get caught.