US says Chinese firms extracted billions of tokens from frontier AI models
Summary
U.S. intelligence agencies report that six Chinese AI companies conducted large-scale distillation attacks (a technique where a 'student' model learns from outputs of a powerful model) on American AI systems from companies like OpenAI and Google since late 2024, extracting billions of tokens through millions of requests. The attackers used sophisticated methods like distributing requests across fake accounts and proxy services to bypass detection and usage limits, allowing them to develop competitive AI models much faster and cheaper than normal training would require.
Solution / Mitigation
The advisory recommends that AI companies improve behavioral and infrastructure-level detection, modify responses when distillation operations are suspected, and share intelligence about these campaigns with stakeholders. Potential warning signs to watch for include new accounts immediately reaching maximum usage, continuous activity without normal human idle periods, shared accounts accessed from many different IP addresses or user agents, identical prompts across multiple providers, unusually high subscription-to-usage ratios, and coordinated switching between access routes.
Classification
Affected Vendors
Related Issues
Original source: https://www.bleepingcomputer.com/news/security/us-says-chinese-firms-extracted-billions-of-tokens-from-frontier-ai-models/
First tracked: September 9, 2026 at 02:00 PM
Classified by LLM (prompt v3) · confidence: 95%