AIToday
Large Language ModelsAI Business & IndustryArs Technica AIPublished: Jun 26, 2026, 06:01 JST

Anthropic: Alibaba used 25,000 fake accounts to clone Claude

Anthropic: Alibaba used 25,000 fake accounts to clone Claude

3 Key Points

  1. What happened

    Between April 22 and June 5, operators affiliated with Alibaba and Alibaba Qwen generated more than 28.8 million exchanges with Claude through almost 25,000 fraudulent accounts, violating Claude's terms of service. The campaign targeted capabilities such as agentic reasoning, software engineering, and long-horizon tasks, using obfuscation techniques and proxy networks to evade detection.

  2. Why it matters

    Alibaba's alleged attack comes weeks after Donald Trump warned that cloning US frontier AI models was unacceptable and a threat to national security. Anthropic argues that these distillation campaigns turn billions of dollars in American investment into a subsidy for geopolitical competitors and could accelerate China's access to advanced AI capabilities without the training costs.

  3. What to watch

    Anthropic has recommended three policy steps to Congress: updating antitrust laws to allow AI firms to share information about Chinese tactics, increasing export controls on advanced chips, and passing laws penalizing Chinese labs' reliance on distillation attacks. The company warns that without intervention, these attacks could help China reach Mythos Preview-level capabilities sooner.

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, in your inbox every morning.

FAQ
How did Alibaba hide the cloning attempt from detection?
Alibaba allegedly used obfuscation techniques and proxy networks to evade detection during the campaign.
What does Anthropic want the US government to do in response?
Anthropic recommended that Congress update antitrust laws to allow AI firms to share information about Chinese tactics, increase export controls on advanced chips, and pass laws penalizing Chinese labs for relying on distillation attacks—such as limiting their access to US models, advanced chips, or data centers outside China.
When did this cloning attack take place?
The attacks occurred between April 22 and June 5.
Ars Technica AIRead Original Article

AI news that matters for your work, delivered every morning.

Pick your industry and the AI tools you use, and get news related to your work every day.

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.

Questions and answers are published on this page.

Related Articles

Next articleHugging Face launches one-command AI model server