Chinese AI firms are stealing proprietary capabilities belonging to US-based AI models via massive distillation campaigns, acccording to US government agencies.
The FBI, the National Security Agency (NSA), and the Cybersecurity and Infrastructure Security Agency (CISA) published a joint advisory on Sept. 8, warning that Chinese AI firms were conducting "industrial-scale" efforts to extract capabilities from leading US AI models. The advisory accuses a number of AI vendors — including Alibaba, DeepSeek, MiniMax, Moonshot AI, StepFun, and Z.AI — of using US large language models (LLMs) to assist training and development of their own proprietary models.
These companies supposedly "extracted billions of tokens across millions of exchanges/requests from U.S. frontier AI models, including variants of Claude, GPT, Gemini, and Grok, since at least late 2024," the advisory stated.
The agencies claim the firms are doing this through a process called distillation, a common practice in which mature "teacher" AI models are used to train "student" AI models. On its own, distillation is a widely accepted practice used for academic research, making models more efficient, and improving models with specialized use cases.