Observed facts: The joint CISA, NSA and FBI advisory alleges that named China-based companies used billions of tokens across millions of exchanges or requests against US frontier-model variants since at least late 2024. It describes multiple access routes, including APIs, cloud providers, aggregators and gray-market “transfer stations,” plus automated failover and shared subscriptions.
Mechanism: Operators distribute requests across providers and intermediaries, probe for useful capabilities, and evaluate whether defensive changes reduce output value; the agencies recommend monitoring, response attenuation, and cross-provider intelligence sharing. Operators distribute requests across providers and intermediaries, probe for useful capabilities, and evaluate whether defensive changes reduce output value; the agencies recommend monitoring, response attenuation, and cross-provider intelligence sharing.
Why now: The advisory says the activity has occurred since at least late 2024 and characterizes distillation as central to the named companies’ development strategy. Its publication turns a contested competition-and-pacing argument into a specific operational warning with suggested defensive steps. The advisory says activity has occurred since at least late 2024 and characterizes distillation as central to the named companies’ development strategy, pairing the claim with operational defensive recommendations.
Implication: Providers may need coordinated detection across APIs, clouds and aggregators because any single access channel can be bypassed.
Evidence boundary: These are claims and attribution by the advisory’s authoring agencies; the supplied source is not an independent adjudication of each named company’s conduct.
Watch: Whether providers publish evidence of cross-platform detection or changes to access controls and response behavior following the advisory.