Chinese Hackers Leverage DeepSeek AI for Increased Cyberattacks

Chinese state-affiliated hacking groups have significantly increased their cyberattack volume by integrating DeepSeek and other open-source AI models into their operations. According to TeamT5, a Taiwanese cybersecurity firm, these groups have more than doubled their attacks since adopting AI to automate routine tasks and develop sophisticated malware. DeepSeek's low operational costs and customizable features make it particularly appealing to hackers, despite the availability of more powerful models like Moonshot's Kimi K3, which remains too expensive for widespread use. Specific groups such as Grimfengxi, Huapi, and Teleboyi have been identified using DeepSeek for various attack stages, including reconnaissance and exploit code generation. Additionally, some hackers have utilized US-developed AI tools like ChatGPT during their operations. The trend indicates a shift towards using more accessible AI tools to enhance the scale and effectiveness of cyberattacks.

Key Points: • Chinese hackers have doubled their attacks by using DeepSeek AI for automation. • DeepSeek is favored for its low cost and weak cybersecurity barriers. • Multiple hacking groups are leveraging AI for various stages of cyber operations.