Chinese hackers are using DeepSeek AI to launch autonomous cyberattacks

Chinese state linked hacking groups are increasingly using DeepSeek and other artificial intelligence models to automate cyber operations and increase the scale of their attacks, according to Taiwanese security researchers. Attack volume from the groups has more than doubled since they began using AI for routine tasks and malware development, according to cybersecurity firm TeamT5. Researchers said DeepSeek has become particularly popular because of its performance, low operating costs, and relatively limited cybersecurity restrictions. “DeepSeek is the AI of choice for Chinese hackers because it’s relatively powerful with very low cyber guardrails,” TeamT5 chief analyst Charles Li said. Researchers said attackers are using AI throughout different stages of cyber operations, including reconnaissance, vulnerability research, exploit development, and target discovery. TeamT5 identified several groups using the technology. Grimfengxi allegedly used DeepSeek to generate exploit code, while Huapi used a Chinese AI model believed to be DeepSeek in an attack targeting a Taiwanese company’s email system. Another group known as Teleboyi used the technology to collect roughly 1,000 internet ...