Loading threat actor…
StepFun, also known as Shanghai Jieyue Xingchen Intelligence Technology Co., Ltd., is a China-based AI company. It has been identified in allegations of unauthorized knowledge-distillation activity targeting U.S. frontier AI models between late 2025 and early 2026. The alleged activity sought to obtain model outputs from Claude and GPT-5 variants to improve coding and agentic capabilities in StepFun's Step 4 model. The allegations characterize the objective as acquisition of proprietary AI-model capabilities and training data rather than a conventional disruptive cyber operation. StepFun is not established as a state-sponsored threat actor; assertions that the activity occurred with Chinese government knowledge remain an assessment rather than confirmed attribution.
Who, where, and from where this actor operates. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
Attributed origin per open-source reporting.
4 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.