White House Accuses Chinese Company of AI Model Theft
A top White House technology official has accused a Chinese company of distilling Anthropic's models to create their own AI product. Michael Kratsios, who leads the White House Office of Science and Technology Policy, claimed that Moonshot AI, a Beijing, China-based AI company, had distilled Anthropic's recently-released Fable model to develop its own K3 model.
Kratsios wrote on X that Moonshot AI developed a sophisticated internal platform to conduct large-scale distillation against U.S. models, allowing them to quickly switch between multiple methods of access to avoid detection. The company has also used GB300 servers, either newly acquired or through Thailand, to train its AI models.
Concerns Over Intellectual Property Theft
The United States strongly supports the free and fair development of AI, including a thriving competitive ecosystem that spans frontier models, specialized systems, open-source frameworks, and open-weight models, according to Kratsios. However, large-scale, covert industrial distillation aimed at stealing proprietary U.S. technology and undermining American research is unacceptable.
Frontier AI companies in the U.S. have pressed policymakers to make it more difficult for third-parties to copy or duplicate advanced commercial models, calling it a form of intellectual property theft. Moonshot AI describes its Kimi K3 model as the first open 2.8 trillion parameter model, and promotes its lower token costs while still delivering near-frontier performance.
Previous Incidents of AI Model Distillation
Piyush Sharma, CEO of Tuskira, an AI cybersecurity detection and response company, said distillation of AI models allows developers to copy many of a model's core capabilities. He pointed to another example when Anthropic earlier this year accused Chinese company Alibaba of distilling their Claude AI model.
According to Anthropic, the campaign used 25,000 fraudulent accounts to run 28.8 million interactions on Claude over six weeks. Given that kind of volume, the goal was clearly replication, said Sharma. When a model has learned to reason through software weaknesses, security gaps, and attack paths, copying its behavior also copies that analytical capability.
Investigations and Concerns
In April, Rep. Andrew Garbarino, R-N.Y., who chairs the House Homeland Security Committee, and Rep. John Moolenaar, R-Mich., Chair of the Select Committee on China, announced they were conducting a joint investigation into the integration of Chinese AI models. The committees said the inquiry will also focus on examining a pattern of conduct by Chinese-based AI laboratories involving the large-scale theft of proprietary capabilities from American frontier AI systems.
Western governments and industry accuse Chinese companies of routinely stealing their technology, intellectual property, and other trade secrets, often with the tacit support of Beijing. The copying of AI models would continue a long and established tradition of Chinese-sponsored intellectual property theft.
However, while distillation attacks by foreign governments or companies on U.S. frontier companies can have real national security implications, it's still a fraught question of where policymakers should draw the line. The AI industry, which includes not just frontier companies but large businesses with their own bespoke models, smaller proprietary startups, and a vibrant open-source ecosystem, routinely share and use third-party data, including critical code and training sets for AI models.
Source: CyberScoop