AI Security · Threat Intelligence
Chinese hackers used AI tools to target over 200 organisations, report says
Chinese state-linked hackers used AI, including the DeepSeek model, to attack more than 200 organisations worldwide in 11 days, according to CrowdStrike. The campaign shows how AI can speed up large-scale cyberattacks.
Ross GrantUpdated 2 min read
The short version
A cybersecurity company says hackers linked to China used artificial intelligence (AI) to attack over 200 organisations in less than two weeks. The AI tools, like DeepSeek, helped the hackers work faster and on a larger scale. The report does not name the organisations or explain exactly how the attacks worked. This shows that AI can make cyberattacks more efficient and harder to defend against.
By the numbers
- 200+organisations targeted worldwideNBC News
- 11 daysduration of the reported attack campaignNBC News
What happened?
Chinese state-linked hackers used AI tools, including the DeepSeek model, to attack more than 200 organisations worldwide in just 11 days, according to CrowdStrike. The campaign targeted both governments and businesses. Only NBC News has reported these findings so far, and specific details about the victims or attack methods have not been disclosed.
Who is affected
According to NBC News (opens in a new tab), hackers linked to the Chinese state targeted more than 200 organisations in a span of just 11 days. The report, based on findings from cybersecurity company CrowdStrike, says both governments and businesses around the world were affected. The specific names of the organisations, sectors, or countries involved have not been disclosed.
How the attack worked
CrowdStrike told NBC News that the attackers used artificial intelligence (AI) tools, including the DeepSeek large language model, to help carry out their campaign. Large language models are AI systems trained on huge amounts of text data, allowing them to generate human-like text or analyse language at scale. The use of these models reportedly allowed the hackers to operate at a speed and scale that would have required much more human effort in the past.
The details of how the AI was used in the attacks are not fully explained in the report. It is not clear whether the AI generated phishing emails, helped write malicious code, or was used in another way. The report does not mention any specific attack techniques, such as prompt injection (where attackers trick an AI model into producing harmful output), but highlights the role of AI in making cyberattacks more efficient.
The response
The only information available comes from CrowdStrike's findings, as reported by NBC News. There is no public statement from the affected organisations or from government agencies. It is also not clear what steps, if any, have been taken to respond to or mitigate the attacks.
What you should do
While the technical details are limited, this story is a reminder for organisations to monitor the use of AI tools in both defensive and offensive security. Security teams should stay informed about how attackers might use AI to automate or scale up attacks, and consider updating their defences accordingly. Regular training and awareness about AI-driven threats can help reduce the risk of falling victim to these new techniques.
Why it matters
This case shows how AI can help attackers launch more cyberattacks in less time. Organisations need to understand that AI is not just a defensive tool but can also be used by attackers to increase the scale and speed of their campaigns.
Key points
- Chinese state-linked hackers targeted over 200 organisations in 11 days.
- AI tools like DeepSeek were used to speed up and scale attacks.
- CrowdStrike is the source of the findings, reported by NBC News.
- No details yet on exactly how AI was used in the attacks.
- The story highlights the growing use of AI in offensive cyber operations.
