Chinese Hackers Amplify Attacks Using DeepSeek AI

Chinese state-affiliated cyber groups have significantly increased their attack volume, more than doubling it since integrating DeepSeek and other open-source AI models. Researchers from TeamT5 report that these hackers are utilizing AI to automate routine tasks and develop sophisticated malware. DeepSeek is favored for its high performance and low cybersecurity barriers, making it an attractive option despite the availability of more powerful models like Kimi K3, which remains too costly for widespread use. The AI is employed across various attack stages, including reconnaissance and exploiting vulnerabilities. Specific groups such as Grimfengxi and Huapi have been identified using DeepSeek for creating exploit codes and attacking email systems. The threat has raised concerns among US national security officials regarding the capabilities of AI in cyber warfare.

Key Points: • Chinese hackers have doubled their attack volume using DeepSeek AI. • DeepSeek is favored for its low cost and weak cybersecurity barriers. • State-affiliated groups are automating tasks and developing malware with AI.