Where Sources Agree

• arrows_inputAlibaba's Large-Scale Distillation Campaign: Coverage highlights that Alibaba conducted the largest distillation campaign observed, involving over 151 million exchanges across 3,500 fraudulent accounts between May and July to train its Qwen models, according to Anthropic's threat intelligence report.
• arrows_inputAI-Driven Cyber Espionage: Various sources indicate that the Russia-linked Midnight Blizzard group utilized AI to orchestrate cyber-espionage campaigns against Ukrainian government and military entities; the group employed multi-agent frameworks to automate malware code rewriting for detection evasion, according to Anthropic's threat intelligence report.
• arrows_inputUS Government Sanction Considerations: Various reports document that the US government is considering sanctions and Entity List designations for companies engaged in illicit AI distillation; Treasury Secretary Scott Bessent confirmed these measures are "on the table" for intellectual property theft.

Where Sources Disagree

• arrows_outputFraudulent Account Count Discrepancy: Some outlets report that DeepSeek, Moonshot, and MiniMax utilized 24,000 fraudulent accounts for distillation campaigns. Conversely, other reports cite a smaller network of 5,000 to 5,380 accounts used by Moonshot and DeepSeek.
• arrows_outputMoonshot Distillation Volume: Reports vary on the total volume of distillation exchanges attributed to Moonshot AI, with some sources citing over 3.4 million exchanges while others report the figure reached over 23 million during the same period.
• arrows_outputDistillation Attack Figures: Reports vary slightly regarding the total volume of distillation attacks identified, with some sources citing nearly 190 million exchanges while others report the figure closer to 200 million.