Chinese hackers using AI more than double cyberattacks

Chinese government-affiliated hackers are increasingly leveraging artificial intelligence tools, leading to a more than twofold increase in cyberattacks, a Taiwanese cybersecurity firm reported. TeamT5 identified the use of AI platforms such as DeepSeek, ChatGPT, and Claude Code as a key factor in accelerating previously time-consuming hacking tasks.

These AI tools assist malicious actors in rapidly identifying potential targets across the internet. They also help in detecting vulnerabilities within company websites, servers, and computers, paving the way for unauthorized access. TeamT5 noted that a hacking group known as GrimFang utilized DeepSeek to develop code that exploits system weaknesses, while another group, TeleBoy, gathered extensive IP address information to probe company domains.

In one documented instance, hackers employed ChatGPT to create a program capable of opening sensitive files obtained from an employee's computer. Similarly, Claude Code was reportedly used to automate attacks against approximately 30 organizations. While AI significantly enhances the speed and scale of cyber reconnaissance and attack capabilities, researchers emphasize that these systems do not operate autonomously. Human hackers remain in control, directing the AI and integrating it with specialized programs to execute their operations.