As cited
Copy frozen at (site build).
Chinese state-linked hackers use DeepSeek to scale attacks
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
Chinese state-linked hackers use DeepSeek to scale attacks
Chinese state-linked cyber groups have integrated DeepSeek and other open-source artificial intelligence (AI) models into their attack workflows, more than doubling their attack volume since adoption. Teams including Grimfengxi, Huapi, and Teleboyi have deployed these models for reconnaissance, exploit code generation, and network mapping against international targets. Researchers attribute the preference for DeepSeek to its high performance, low cost, minimal security guardrails, and ease of customization compared to Western alternatives.
Why it matters: Organizations globally face increased targeting from Chinese state hackers who now operate at greater scale and speed using readily available AI tools; security teams should expect higher attack velocity, more sophisticated reconnaissance, and faster exploit development from these adversaries.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
Chinese state-linked hackers use DeepSeek to scale attacks
Chinese state-linked cyber groups have doubled their attack frequency after integrating open-source artificial intelligence models, particularly DeepSeek, into their operations for reconnaissance, exploit development, and malware creation. Researchers at TeamT5 identified multiple state-affiliated groups using DeepSeek throughout attack stages, citing its high performance, low cost, and permissive guardrails compared to Western models. A separate investigation found a Chinese hacking software vendor using ChatGPT to decrypt stolen Signal databases during an intrusion against a Western think tank.
Why it matters: Organizations globally, especially those in Taiwan and the technology sector, face increased targeting from state-sponsored groups leveraging AI to accelerate attack cycles and breach recovery processes. Security teams need to monitor for AI-assisted reconnaissance and malware generation techniques and review access controls for sensitive communications platforms like Signal.
- Source published
- First seen by Cybersecurity Tracker