Loading story…
Anthropic accused Alibaba and its Qwen research division of illicitly accessing its Claude models in what it called the largest known AI distillation attack against the company. In a letter to the U.S. Senate Banking Committee, Anthropic said operators used nearly 25,000 fraudulent accounts to generate more than 28.8 million Claude exchanges between April 22 and June 5, targeting high-value capabilities from the Mythos Preview model, including software engineering and agentic reasoning. The company said the activity was designed to replicate frontier-model performance without incurring the full cost of training a competing system.
Anthropic warned that adversarial distillation can transfer advanced capabilities while omitting the original model’s safety guardrails, raising both security and national security concerns beyond intellectual property theft. The company linked the alleged operation to a broader pattern involving other Chinese AI labs, including DeepSeek, Moonshot AI, and MiniMax, and called for antitrust-safe threat intelligence sharing, continued AI chip export controls, and penalties for firms found to have improperly used U.S. model outputs. The disclosure has also spurred proposed U.S. legislative action, including potential sanctions or blacklisting of Chinese companies accused of training rival systems on unauthorized American AI outputs.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
7 events from the most recent confirmed update back to the earliest known activity.
TechCrunch reported that Alibaba classified Anthropic's Claude Code as high-risk software and told employees it would ban use of the tool, directing them instead to Alibaba's own Qoder product. The report said the ban would take effect on July 10, 2026.
Following Anthropic's disclosure, Senators Bill Hagerty and Andy Kim were reported to be preparing an amendment that would blacklist or sanction Chinese firms found improperly using U.S. AI model outputs to train competing systems.
Anthropic cited a separate February 2026 case involving DeepSeek and two other Chinese AI laboratories as part of what it described as a broader pattern of unauthorized exploitation of its AI models.
Two days after Anthropic sent its June 10, 2026 warning letter to Congress, the U.S. government imposed restrictions on the export and deployment of Anthropic's Mythos and Fable models. The reference says the move led to the models' global disablement over concerns they could be accessed by Chinese military intelligence services.
On June 10, 2026, Anthropic sent a letter to Senate Banking Committee leaders Tim Scott and Elizabeth Warren accusing Alibaba and Alibaba Qwen of illicitly accessing Claude in what it called the largest known distillation attack against the company.
Anthropic said the campaign ran through June 5, 2026, using nearly 25,000 fraudulent accounts to generate more than 28.8 million Claude exchanges. The activity allegedly targeted software engineering and agentic reasoning capabilities tied to Claude Mythos Preview.
Anthropic said operators affiliated with Alibaba and its Qwen division began a large-scale distillation campaign against Claude on April 22, 2026. The company alleged the operation used fraudulent accounts to extract high-value capabilities from its models.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
13 references tracked. Mallory keeps watching after this page renders.
techcrunch.com
Open sourcedatainnovation.org
Open sourcearstechnica.com
Open sourcezdnet.fr
Open sourcebankinfosecurity.com
Open sourceinfoworld.com
Open sourcelawfaremedia.org
Open sourceassets.bwbx.io
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
**Anthropic** reported detecting “industrial-scale” **distillation** activity targeting its *Claude* models and attributed it to three Chinese AI labs: **DeepSeek, Moonshot, and MiniMax**. Anthropic said the actors used **~24,000 fraudulent accounts** and generated **~16 million exchanges** with Claude, allegedly leveraging proxy/reseller access to evade controls and violate terms of service and regional restrictions. The company characterized the activity as deliberate capability extraction rather than normal customer usage, and paired the disclosure with renewed calls for stronger export controls. Anthropic warned that models produced via illicit distillation may lack safety guardrails and could be repurposed for **national security-relevant misuse**, including **offensive cyber operations**, surveillance, and disinformation. Reporting described tactics including coordinated fake-account networks (“hydra clusters”), proxy services, and prompt patterns aimed at extracting advanced reasoning and other capabilities at scale; one breakdown cited DeepSeek activity at **150,000+ exchanges** and Moonshot at **3.4M+ exchanges**, alongside prompt engineering intended to elicit step-by-step reasoning. Separate coverage on training-data memorization/copyright and a vendor blog on AI-driven crypto fraud discuss broader AI risk trends but do not address Anthropic’s specific distillation allegations.
Jul 16, 2026
Anthropic alleged that three China-based AI labs—**DeepSeek, Moonshot AI, and MiniMax**—used roughly **24,000 fraudulent accounts** to generate more than **16 million interactions** with Claude in a coordinated effort to extract the model’s advanced reasoning, coding, and tool-use capabilities. The company said it linked the activity through IP correlations, request metadata, and infrastructure indicators, and warned that large-scale unauthorized distillation could remove safety guardrails and enable copied capabilities to be used in offensive cyber operations, disinformation, intelligence collection, and mass surveillance. Anthropic said it shared its findings with U.S. government entities and industry partners, while noting it had no evidence that the Chinese government directly coordinated the campaigns. The allegations surfaced as Anthropic remains in a separate high-stakes dispute with the U.S. Department of Defense, which on June 4 refused to reverse the company’s designation as a supply-chain risk. Anthropic is challenging the Pentagon’s March blacklisting after Defense Secretary Pete Hegseth invoked emergency powers following failed talks over limits on Claude’s use for domestic surveillance and autonomous weapons. Federal attorneys told the court the procedural dispute over administrative remedies is now moot because the secretary has denied reconsideration, and reporting indicates a majority of the appellate panel appeared inclined to let the designation stand while the case proceeds.
Jun 29, 2026
The White House has accused China-linked actors and other foreign entities of running **industrial-scale AI model extraction and distillation campaigns** against U.S. frontier AI companies, saying the operations use tens of thousands of proxy or fraudulent accounts, jailbreaking techniques, distributed probing, and iterative prompt engineering to copy proprietary model behavior at scale. A memorandum from Office of Science and Technology Policy Director Michael Kratsios said the activity targets American AI innovation without requiring a traditional network breach, and warned that derivative systems may reproduce benchmark performance while stripping away safety controls, neutrality safeguards, and other protections built into the original models. Federal agencies have been directed to expand information sharing with AI firms and develop best practices for detecting, mitigating, and remediating the campaigns, with officials pointing to stronger telemetry, logging, identity controls, and real-time detection of distributed abuse as likely defenses. The administration is also weighing accountability measures, including possible sanctions and legal or export-control actions, while lawmakers advance legislation to identify and punish foreign actors targeting U.S.-owned AI models; China has rejected the allegations as "slander" and unjustified suppression, even as prior claims from OpenAI and Anthropic tied Chinese firms including **DeepSeek**, **Moonshot**, and **MiniMax** to large-scale distillation efforts.
Jun 29, 2026