Anthropic's distillation battle turns to the dark web as China concerns swell

Anthropic's head of threat intelligence, Jacob Klein, says his company welcomes competition. But what's coming out of the Chinese market, he says, is something much closer to theft. Foreign adversaries, Klein says, are accessing Anthropic's Claude models — a process known as distillation — to train competing technology and sell copycat versions at a lower price. While distillation can be done legally, Klein says that's not what's happening here. "There's an entire illicit ecosystem to try to gain access to Claude and other models," Klein told CNBC. "This ecosystem goes through any means necessary to evade our controls, so they can spin up accounts at extreme scale." Distillation has become a controversial topic across the artificial intelligence landscape. Depending on how it's conducted, the practice can allow a model developer to use the output from another company's technology to create a competitive offering at a tiny fraction of the cost. In the U.S., some factions in the tech sector have urged policymakers to steer clear of regulations so that the best and most cost-effective AI can win, while others are lobbying for a crackdown on what they see as theft of intellectual property. In an April memo, the Trump administration wrote distillation that undermines American research and proprietary information is "unacceptable," and said it would explore "a range of measures to hold foreign actors accountable." The threat is intensifying at a pivotal moment for Anthropic. The 5-year-old company has soared to a private market valuation of close to $1 trillion and is expected to go public as soon as October, CNBC has reported.

Anthropic is singling out Chinese AI lab Moonshot AI as one of the companies it says is ripping off its technology. Moonshot's Kimi K3 model took the tech world by storm in July with its cheaper, frontier-level AI offering. It's been widely adopted in Silicon Valley, thanks in part to its lower price point and ability for companies to tailor it more easily. Klein said Kimi K3 was illegally trained off the newest version of Claude. "We've seen a fair amount of this from China," Klein said. "This is something that the industry writ large is dealing with." Earlier this year, Anthropic alleged Moonshot and two other Chinese AI labs – DeepSeek and MiniMax – distilled its frontier AI models. Anthropic has also accused Alibaba, which makes the Qwen family of models, of conducting a massive "distillation attack" to illegally capture capabilities from Claude. OpenAI and Google have both published reports on distillation and claim they're fighting the same issue. Alibaba, DeepSeek, Moonshot and MiniMax didn't respond to requests for comment.

'Fraudulent means' Cybersecurity experts told CNBC that, in addition to China, the threat is also coming from countries like Iran, Russia and North Korea, where use of Claude, Google's Gemini and OpenAI's ChatGPT are restricted by the comp...