Taiwanese cybersecurity firm warns that AI tools have more than doubled Chinese state-backed cyberattacks
decoder ·
Taiwanese cybersecurity firm TeamT5 reports that Chinese state-backed hacking groups have more than doubled their attacks since adopting AI for routine tasks and malware development. TeamT5 chief analyst Charles Li said DeepSeek is particularly popular among Chinese hackers because it is powerful and has relatively few cybersecurity safeguards. The group Grimfengxi used DeepSeek to write exploit code, Huapi used a likely DeepSeek-based Chinese model, and Teleboyi used the platform to gather IP addresses and map domains. CyCraft found that ChatGPT was used to help create a decryption module for a Signal database, while TeamT5 said the group Slime22 used Anthropic’s Claude Code to move through a Taiwanese company’s systems. A UK AI Safety Institute study found that the cyber capabilities of open models have increased sharply, although they remain several months behind Western frontier models such as Claude Mythos for fully autonomous attacks.
decoder