Executive Summary
US cybersecurity and intelligence agencies accused China-based AI companies of systematic, industrial-scale distillation of Claude, GPT, Gemini and Grok as a core part of their development strategy.
What Happened
U.S. cybersecurity and intelligence agencies have accused China-based artificial intelligence (AI) companies of conducting "systematic extraction" of proprietary functionalities and capabilities of American frontier models through distillation attacks. The activity has been described as occurring at an industrial-scale and one that forms the "core" of their AI development strategy, according to
Affected Products
- Anthropic Claude
- OpenAI GPT
- Google Gemini
- xAI Grok
Vulnerability / Attack Technique
Model distillation through systematic extraction
Technical Mechanism
Model outputs are captured at scale and used to train competing models.
AI Security Category
LLM10:2025 Unbounded Consumption
Relevant Frameworks
RealGround Analysis
A government warning about capability extraction through APIs. RealGround analysis: usage monitoring is the main control for model owners.
Recommended Controls
- Monitor model API usage for extraction patterns
Related RealGround Service
AI Security Readiness Assessment · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/09/us-agencies-accuse-china-ai-firms-of.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-17.