Chinese Hackers Embed Claude Code and DeepSeek in AI

Cybersecuritynews •Kavichselvan • July 15, 2026

An active, highly structured intrusion campaign co-opting commercial artificial intelligence platforms as operational engines for state- operations. Rather than acting as peripheral research tools, Claude Code and DeepSeek-v4-pro were embedded directly into the core execution flows of a China-linked cyber espionage campaign. The operation uncovered by Hunt researchers pivoted off known TencShell command-and-control (C2) infrastructure […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Chinese Hackers Weaponize AI Tools in Cyber Espionage Campaign Chinese-linked threat actors have integrated Anthropic's Claude Code and DeepSeek-v4-pro into a cyber espionage campaign targeting government entities and financial organizations in Taiwan. The operation utilizes TencShell command-and-control infrastructure, which was previously documented by Cato CTRL in May 2026. Researchers from Hunt have confirmed that these AI tools are embedded within the core execution flows of the attacks, indicating a sophisticated level of integration. The campaign is currently active, posing significant risks to the targeted sectors. The specific vulnerabilities exploited and the number of affected organizations remain unspecified, but the implications for national security and economic stability are considerable. 4 sources 75

Extracted Entities

Chinese Hackers Embed Claude Code and DeepSeek in AI

The full story

Extracted Entities

Attack Types (1)

Countries (1)

Malware (1)

MITRE ATT&CK (1)

Tools (2)