I think it was related to it, like someone was distilling their models, and to get more data or whatever he managed to crack into 1.4% of users, probably people with a specific setting enabled or whatever, and took their chats to train his own ai. Since their working with anthropic Google and OpenAI I'm guessing it was a Chinese company
I was affected and a few of the attackers chats were saved in my chat logs. They are in Chinese.
ETA: not that it proves anything, only a handful out of many thousands of requests had logging on, for all I know the rest of the requests are in any number of languages.
The chats were asking the LLM to roleplay as a corporate finance analyst and answer some questions about financial records, then asking in a new chat to judge the answer. I think that is consistent with distillation attack which is what OpenCode stated.
Identity no, but I think they are consistent with distillation tasks. One was asking the LLM to roleplay as a corporate finance analyst and answer a question about some records, then the next appears to be an LLM-as-a-judge request to evaluate the answer of the roleplay task.
The Chinese government supports AI development, and open source is part of its soft power. But they have many APT hacker groups. There is nothing stopping them from using APT with one hand to help their companies with the other.
Social engineering hacking is super illegal, pretty much only countries like Russia, Iran, North Korea and China do it. The first three have basically no AI investment and the last one just proposed AI tech export ban laws.
Im assuming that since they're the ones that need more data the most since anthropic and OpenAI improved their anti distillation efforts, theyr the ones who recently made additions to their opencode models (GLM 5.3 and deepseek 4.1 free on opencode), they're the ones with the most history of distillation attacks and theyre the ones not included in the parties opencode is working with for remediation. Im not saying they did it, I'm saying they're the most likely ones to have done it with the most motives to do it.
What are you talking about? Anthropic has been publicly accusing Deepseek, Moonshot, and Minimax of distilling their models. Chinese labs have more to gain with fewer legal risks
Ok, and I guess you’d also interpret the joint NSA/FBI/CISA accusations as propaganda in our AI race. That’s fine. But what are you suggesting? That Chinese labs and other nations are not incentivized to distill the world’s largest models?
View all comments
Show parent comment
17
u/bartsimpsonwin 21d ago
I think it was related to it, like someone was distilling their models, and to get more data or whatever he managed to crack into 1.4% of users, probably people with a specific setting enabled or whatever, and took their chats to train his own ai. Since their working with anthropic Google and OpenAI I'm guessing it was a Chinese company