{"id":323,"date":"2026-06-28T08:12:31","date_gmt":"2026-06-28T00:12:31","guid":{"rendered":"https:\/\/aidashxp.com\/anthropic-alibaba-claude-distillation-attack\/"},"modified":"2026-06-28T08:12:31","modified_gmt":"2026-06-28T00:12:31","slug":"anthropic-alibaba-claude-distillation-attack","status":"publish","type":"post","link":"https:\/\/aidashxp.com\/en\/anthropic-alibaba-claude-distillation-attack\/","title":{"rendered":"Anthropic accuses Alibaba: 25,000 fake accounts conducted 28.8 million model distillation attacks on Claude"},"content":{"rendered":"

American AI giantAnthropic<\/strong>A scathing letter was recently submitted to the U.S. Senate accusing Chinese technology companies ofAlibaba<\/strong>Systematically stealing its flagship model through a large-scale \u201cmodel distillation\u201d attackClaude<\/a>core competencies. This incident, known as the \"largest-scale AI model extraction operation in history,\" has pushed the Sino-US AI competition to a new level of tension.<\/p>\n\n\n\n

28.8 million conversations, 25,000 fake accounts<\/h2>\n\n\n\n

According to a letter Anthropic submitted to the Senate Banking Committee on June 10, Alibaba\u2019sTongyi Qianwen<\/a>(Qwen) Laboratory operator, inApril 22 to June 5<\/strong>Within six weeks, by approx.25,000 fake accounts<\/strong>,andClaude<\/a>carried out more than28.8 million times<\/strong>Dialogue exchange. This scale is nearly twice the combined size of the other three Chinese AI lab attacks Anthropic discovered in February this year.<\/p>\n\n\n\n

What is \"model distillation\"?<\/h2>\n\n\n\n

The keywords used by Anthropic areDistillation<\/strong>. This is a technique that uses the output of a powerful model to train a weaker model - without touching the source code, model weights, or training data, the attacker can simply ask the target model millions of carefully crafted questions, record the answers, and then use these question and answer pairs to train his own model.<\/p>\n\n\n\n

The key issue is: the cloned modelInherited abilities, but not inherited safety guardrails<\/strong>. originalClaude<\/a>Security training, usage policies, and access controls built into the model are all lost during the distillation process. This means that the distilled model may have close to theClaude<\/a>powerful ability.<\/p>\n\n\n\n

Highly precise attack targets<\/h2>\n\n\n\n

Unlike the previous attack discovered in February, this operation did not generally extractClaude<\/a>general ability, butAimed accuratelyClaude<\/a>Core areas with the most commercial value<\/strong>: Agentic Reasoning, software engineering and long-term task processing. These are key capabilities that Anthropic has invested heavily in research and development and are the most difficult to replicate.<\/p>\n\n\n\n

Industry Impact and Controversy<\/h2>\n\n\n\n

Anthropic's choice to submit the letter to Congress instead of the court itself illustrates the complexity of the matter. The output of current AI models is not as explicitly protected legally as code or copyrighted text, which is why Anthropic is pursuing legislation rather than litigation. Alibaba, meanwhile, has yet to publicly respond to the accusations.<\/p>\n\n\n\n

Analysts pointed out that this incident has a direct warning to developers who use APIs to build products: the intelligence you rent may be copied, and the security controls carried with the model may disappear after copying. Chief analyst at Greyhound Research warns,\u201cEnterprise supply chains no longer stop at software, APIs and cloud zones, but now also include rented intelligence \u2013 and rented intelligence can be replicated and redeployed.\u201d<\/strong><\/p>\n\n\n\n

Summarize<\/h2>\n\n\n\n

Regardless of whether Anthropic's specific accusations against Alibaba can ultimately be proven, \"model distillation\" as an extremely low-cost means of replicating capabilities is escalating at an alarming rate. From 16 million in February to 28.8 million in June, the growth curve of attack scale itself is the clearest warning. For developers relying on cutting-edge APIs, model security is no longer an optional item \u2013 it is becoming a core topic in supply chain risk management.<\/p>\n\n\n\n

AI Dash<\/a> \u2014 Discover the most useful AI tools and track the latest trends in the AI \u200b\u200bindustry.<\/p>","protected":false},"excerpt":{"rendered":"

\u7f8e\u56fdAI\u5de8\u5934Anthropic\u8fd1\u65e5\u5411\u7f8e\u56fd […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[1],"tags":[],"class_list":["post-323","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/aidashxp.com\/en\/wp-json\/wp\/v2\/posts\/323","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aidashxp.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aidashxp.com\/en\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/aidashxp.com\/en\/wp-json\/wp\/v2\/comments?post=323"}],"version-history":[{"count":0,"href":"https:\/\/aidashxp.com\/en\/wp-json\/wp\/v2\/posts\/323\/revisions"}],"wp:attachment":[{"href":"https:\/\/aidashxp.com\/en\/wp-json\/wp\/v2\/media?parent=323"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aidashxp.com\/en\/wp-json\/wp\/v2\/categories?post=323"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aidashxp.com\/en\/wp-json\/wp\/v2\/tags?post=323"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}