Irony alert: OpenAI whines that Chinese model stole its special IP that it stole from everybody else
READ MORE
- The tech industry is hot for shopping bots, but they're years away59 minutes ago
- Peter Norvig says all aboard for AI coding13 hours ago
- Trump decrees era of 'Super Intelligence' upon us15 hours ago
- Show colleagues how much you care by sending an AI avatar to your Google Meet call16 hours ago
- AI market needs to make $6 trillion a year by 2031 to fund its infrastructure habit16 hours ago
-
Astronomer watches Starlink satellites sinking to build a ‘planetary barometer’
-
AI models keep posting screenshots showing sensitive data from inside tech companies
-
EXCLUSIVE Microsoft tells nonprofits their deleted M365 data isn't coming back
-
Google ending ChromeOS support two years early
-
FBI to ShinyHunters: 'We know how to find you'
-
Microsoft's Copilot super app comes with a meter attached - Hot Dog! America's new chatbot is packed with wieners Just ask America.gov and you'll receive a favorite July 4th food.
- Huawei boss claims homegrown AI chip sales top Nvidia in China The chips may not be as advanced, but they won't get banned at a moment's notice, Eric Xu says
- Add one more AI worry to the nightmare scenario: self-replicating prompt injections It's a worm attack, AI-style
- Zuckerberg touts enterprise AI push because Meta would never do anything to damage your reputation New business unit to be led by former MongoDB CEO 'CJ' Desai
- AMD's 192 GB Gorgon Halo prices might leave you petrified Regular pricing starts at $6,799 - all that memory doesn't come cheap
- Security Russians are posing as Signal support to launch phishing attacks PLUS: US takes down Iranian propaganda sites; Marketing company asks 'Why Do We Have Your Information?' And more!
- Security Microsoft patches failed to fix on-prem SharePoint, which is now under zero-day attack PLUS: China upgrades smartphone surveillance tools; Ring eases anti-snooping stance; and more
- Black Hat and DEF CON DEF CON Franklin project enlists hackers to harden critical infrastructure Voting village reports have been so successful, says Jeff Moss, that the whole of DEF CON will now be included
- Security EQT buys majority share in Swiss cybersecurity biz Acronis Went at equivalent of $3.5B+ valuation for entire firm, though portion sold not specified
- Malware Month Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sight On the plus side, infosec's a good bet for a long, stable career
- KDE turns 30 and someone's brought an AI-native desktop proposal Akademy talk imagines Plasma assembling itself around a personal model of each user
- Shopify extends lifeline to Tailwind as vibe coding erodes web dev platform's bottom line Acquisition gives open source CSS framework 'a stable long-term home'
- Switzerland tests a FOSS escape route from Microsoft 365 Swiss Army sticks a knife in American cloud apps with its own FOSS push
- Feel peak Windows was 7? You might like Kumander Linux Debian and Xfce – solid, sensible choices – with a pretty skin
- Canonical shuttering some of its legacy chat channels The Ubuntu Pastebin went in June, IRC gets demoted next
OpenAI, which hoovered up vast amounts of internet content amid copyright fights, has accused individuals associated with China’s Moonshot AI of being involved in a "distillation attack" that began July 1. The house of Altman warns that extracting its models’ reasoning at scale could help rivals train capable models without preserving the same guardrails.
Model distillation is a machine learning technique that can involve using one model’s outputs to train another – in adversarial cases, by sending bulk queries designed to reproduce the larger model’s reasoning and capabilities.
Both the feds and major US AI companies, including Google and Anthropic, have accused Chinese rivals - and specifically Moonshot AI - of using distillation to reproduce capabilities from American models. In a Wednesday blog, OpenAI chimed in, saying it spotted and ultimately disrupted an adversarial distillation campaign that ran nearly all of July.
REG AD
“The operators did not break our encryption, compromise a database, or gain direct access to stored user conversations,” according to the blog. “Instead, they manipulated model interactions so that protected reasoning could be reproduced in forms visible to the requester in a coordinated, scaled manner that violated our terms of service.”
REG AD
The queries began on July 1, and while they started slowly, “we observed high-volume spikes on July 24 and 25 consisting of 16,000 requests using a relevant extraction pattern from over 4,000 users,” OpenAI said.
Upon investigating the incident, the AI giant identified related “prompt-pattern activity” across more than 15,000 users. OpenAI fully disrupted the campaign on July 28, we’re told.
While OpenAI said that it's unclear whether all of the operators during the July time period were linked to just one rival AI company, the “core cluster” of the theft came from Moonshot AI, which developed Kimi.
The Register reached out to Moonshot AI for comment and did not receive an immediate response. We also asked OpenAI which of its models were targeted during the July campaign, but did not hear back.
It’s worth noting that, in late July, US President Donald Trump’s Assistant for Science and Technology Michael Kratsios also accused Moonshot AI of creating its Kimi K3 model by distilling Anthropic’s Fable.
Anthropic’s Claude Opus 5.5 model, released a week ago, comes with a defense against distillation called "preserved thinking" that it introduced with Fable 5.1.
“Adversarial distillation poses safety and national security risks,” OpenAI said on Wednesday, echoing earlier gripes from American companies and government officials.
“Extracted reasoning could be used to train another model without preserving the safeguards applied to the original model’s user-facing outputs,” OpenAI added. “At scale, distillation can also accelerate the transfer of advanced capabilities without requiring the same investment in safety. These concerns become heightened as models gain capabilities in dual use domains.”
REG AD
In response, OpenAI said it banned the model-copying accounts tightened signup and infrastructure controls and expanded monitoring efforts.
It also “closed a pathway that allowed someone who already possessed another user's encrypted reasoning to replay it and recover its contents,” and worked with service providers to ensure that this type of distillation activity didn’t just move to third-party services.
Additionally, OpenAI shared the details of its investigation with other AI firms, through the Frontier Model Forum, and government information-sharing programs.®
[](https://www.facebook.com/sharer.php?u=https%3A%2F%2Fwww.theregister.com%2Fsecurity%2F2026%2F09%2F30%2Firony-alert-openai-whines-that-chinese-model-stole-its-special-ip-that-it-stole-from-everybody-else%2F5300285) [](https://twitter.com/intent/tweet?url=https%3A%2F%2Fwww.theregister.com%2Fsecurity%2F2026%2F09%2F30%2Firony-alert-openai-whines-that-chinese-model-stole-its-special-ip-that-it-stole-from-everybody-else%2F5300285) [](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.theregister.com%2Fsecurity%2F2026%2F09%2F30%2Firony-alert-openai-whines-that-chinese-model-stole-its-special-ip-that-it-stole-from-everybody-else%2F5300285) [](https://bsky.app/intent/compose?text=Irony%20alert%3A%20OpenAI%20whines%20that%20Chinese%20model%20stole%20its%20special%20IP%20that%20it%20stole%20from%20everybody%20else%0Ahttps%3A%2F%2Fwww.theregister.com%2Fsecurity%2F2026%2F09%2F30%2Firony-alert-openai-whines-that-chinese-model-stole-its-special-ip-that-it-stole-from-everybody-else%2F5300285) [](https://www.reddit.com/submit?url=https%3A%2F%2Fwww.theregister.com%2Fsecurity%2F2026%2F09%2F30%2Firony-alert-openai-whines-that-chinese-model-stole-its-special-ip-that-it-stole-from-everybody-else%2F5300285&title=Irony%20alert%3A%20OpenAI%20whines%20that%20Chinese%20model%20stole%20its%20special%20IP%20that%20it%20stole%20from%20everybody%20else) [](https://api.whatsapp.com/send?text=Irony%20alert%3A%20OpenAI%20whines%20that%20Chinese%20model%20stole%20its%20special%20IP%20that%20it%20stole%20from%20everybody%20else%0Ahttps%3A%2F%2Fwww.theregister.com%2Fsecurity%2F2026%2F09%2F30%2Firony-alert-openai-whines-that-chinese-model-stole-its-special-ip-that-it-stole-from-everybody-else%2F5300285)
REG AD
TOP STORIES
AI
Infosec
FOSS
Firefox 157: Could bold new look be just what Mozilla needs?\ Yet another new version of Firefox, with a significant reskin