Loading story…
Anthropic alleged that three China-based AI labs—DeepSeek, Moonshot AI, and MiniMax—used roughly 24,000 fraudulent accounts to generate more than 16 million interactions with Claude in a coordinated effort to extract the model’s advanced reasoning, coding, and tool-use capabilities. The company said it linked the activity through IP correlations, request metadata, and infrastructure indicators, and warned that large-scale unauthorized distillation could remove safety guardrails and enable copied capabilities to be used in offensive cyber operations, disinformation, intelligence collection, and mass surveillance. Anthropic said it shared its findings with U.S. government entities and industry partners, while noting it had no evidence that the Chinese government directly coordinated the campaigns.
The allegations surfaced as Anthropic remains in a separate high-stakes dispute with the U.S. Department of Defense, which on June 4 refused to reverse the company’s designation as a supply-chain risk. Anthropic is challenging the Pentagon’s March blacklisting after Defense Secretary Pete Hegseth invoked emergency powers following failed talks over limits on Claude’s use for domestic surveillance and autonomous weapons. Federal attorneys told the court the procedural dispute over administrative remedies is now moot because the secretary has denied reconsideration, and reporting indicates a majority of the appellate panel appeared inclined to let the designation stand while the case proceeds.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
4 events from the most recent confirmed update back to the earliest known activity.
According to a June 4, 2026 court filing, the U.S. Department of Defense denied Anthropic’s administrative request to reverse its supply-chain risk designation. Federal attorneys argued this denial mooted the question of whether Anthropic had sued before exhausting administrative remedies.
A three-judge federal appeals panel heard arguments in Washington, D.C., in May 2026 over Anthropic’s challenge to the Pentagon blacklisting. According to the report, a majority of the panel appeared inclined to allow Hegseth to proceed with the designation.
In March 2026, Defense Secretary Pete Hegseth invoked emergency powers to designate Anthropic as a supply-chain risk after talks failed over limits on use of Claude for domestic surveillance and autonomous weapons. Anthropic later challenged the designation in federal appeals court.
Anthropic said three China-based AI labs—DeepSeek, Moonshot AI, and MiniMax—used about 24,000 fraudulent accounts to generate more than 16 million exchanges with Claude in an effort to extract advanced model capabilities. The company said it identified the activity through IP correlations, request metadata, and infrastructure indicators and shared its findings with U.S. government entities and industry partners.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
5 references tracked. Mallory keeps watching after this page renders.
govinfosecurity.com
Open sourcebankinfosecurity.com
Open sourcefoxnews.com
Open sourceismg-cdn.nyc3.cdn.digitaloceanspaces.com
Open sourceismg-cdn.nyc3.cdn.digitaloceanspaces.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Anthropic accused Alibaba and its **Qwen** research division of illicitly accessing its Claude models in what it called the largest known AI distillation attack against the company. In a letter to the U.S. Senate Banking Committee, Anthropic said operators used nearly **25,000 fraudulent accounts** to generate more than **28.8 million** Claude exchanges between April 22 and June 5, targeting high-value capabilities from the **Mythos Preview** model, including software engineering and agentic reasoning. The company said the activity was designed to replicate frontier-model performance without incurring the full cost of training a competing system. Anthropic warned that adversarial distillation can transfer advanced capabilities while omitting the original model’s safety guardrails, raising both security and national security concerns beyond intellectual property theft. The company linked the alleged operation to a broader pattern involving other Chinese AI labs, including **DeepSeek**, **Moonshot AI**, and **MiniMax**, and called for antitrust-safe threat intelligence sharing, continued AI chip export controls, and penalties for firms found to have improperly used U.S. model outputs. The disclosure has also spurred proposed U.S. legislative action, including potential sanctions or blacklisting of Chinese companies accused of training rival systems on unauthorized American AI outputs.
Jul 12, 2026
U.S. Defense Secretary Pete Hegseth reportedly issued a near-term deadline for **Anthropic** to provide expanded access to its **Claude** AI model for use in classified and operational environments, prompting analysts to warn the ultimatum is unrealistic and could create **cybersecurity and supply-chain** knock-on effects across the **defense industrial base (DIB)**. Reporting indicates the Pentagon is reviewing its business relationship with Anthropic after weeks of negotiations over model access, safeguards, and constraints, and that Hegseth has warned Anthropic could be designated a **“supply chain risk”** or face other punitive measures if it does not meet military requirements. Separate commentary highlighted the emerging risk of **AI-enabled cyber operations**, citing an Anthropic disclosure that **Chinese threat actors** allegedly jailbroke *Claude Code* and used it to target roughly **30 companies and government agencies** globally in what was described as an early example of a large-scale campaign with minimal human involvement. The piece argues that many AI-assisted attacks will be harder to attribute or even recognize as AI-enabled because most activity will not occur on platforms with the same level of internal monitoring, and it calls out a gap in U.S. government capability to systematically identify whether incidents are driven by novel AI agent capabilities versus conventional tradecraft—an issue that intersects with the Pentagon’s push to operationalize frontier models while managing abuse, assurance, and supply-chain exposure.
Jun 29, 2026
**Anthropic** reported detecting “industrial-scale” **distillation** activity targeting its *Claude* models and attributed it to three Chinese AI labs: **DeepSeek, Moonshot, and MiniMax**. Anthropic said the actors used **~24,000 fraudulent accounts** and generated **~16 million exchanges** with Claude, allegedly leveraging proxy/reseller access to evade controls and violate terms of service and regional restrictions. The company characterized the activity as deliberate capability extraction rather than normal customer usage, and paired the disclosure with renewed calls for stronger export controls. Anthropic warned that models produced via illicit distillation may lack safety guardrails and could be repurposed for **national security-relevant misuse**, including **offensive cyber operations**, surveillance, and disinformation. Reporting described tactics including coordinated fake-account networks (“hydra clusters”), proxy services, and prompt patterns aimed at extracting advanced reasoning and other capabilities at scale; one breakdown cited DeepSeek activity at **150,000+ exchanges** and Moonshot at **3.4M+ exchanges**, alongside prompt engineering intended to elicit step-by-step reasoning. Separate coverage on training-data memorization/copyright and a vendor blog on AI-driven crypto fraud discuss broader AI risk trends but do not address Anthropic’s specific distillation allegations.
Jul 16, 2026