The White House has said it will work more closely with US artificial intelligence (AI) firms to combat industrial-scale campaigns by foreign actors to steal advances in the technology. Michael Kratsios, Director of Science and Technology Policy, wrote in an internal memo that the administration had new information indicating foreign entities, principally based in China were exploiting American firms. Through a process called distilling, such firms are essentially copying AI technology developed by US companies, he said. A representative of China's US embassy in Washington DC said its development was the result of its own dedication and effort as well as international cooperation. In the memo, Kratsios said the aim was to systematically undermine American research and development and access proprietary information. To avoid and halt malicious exploitation, he said the White House would take four actions:
- sharing more information with US AI companies about tactics employed and actors involved in distillation campaigns
- working to better coordinate with companies to fight the attacks
- develop a set of best practices to identify, mitigate, and remediate them
- explore how the White House can hold foreign actors accountable for such distillation.
The memo did not detail any specific plans for action against foreign entities found to be undertaking distillation of US AI technology. A White House spokesperson declined to comment beyond the memo. A representative of China's US embassy in Washington DC took issue with the unjustified suppression of Chinese companies by the US in response to the memo. China is not only the world's factory but is also becoming the world's innovation lab, the representative added. China's development is the result of its own dedication and effort as well as international cooperation that delivers mutual benefits.
Distillation campaigns are carried out by firms that usually operate many thousands of individual accounts for a given AI chatbot or tool, allowing them to appear as normal users. Those accounts then undertake more coordinated attempts to jailbreak or otherwise expose information about AI models that is not supposed to be made public, which is saved and applied to their own AI model building and training. Kratsios stated, As methods to detect and mitigate industrial-scale distillation grow more sophisticated, foreign entities who build their AI capabilities on such fragile foundations should have little confidence in the integrity and reliability of the models they produce. While he did not name any foreign entities, leading AI companies like OpenAI and Anthropic have indicated they are dealing with such distillation activities. Earlier this year, Anthropic described distillation attacks by three AI laboratories, DeepSeek, Moonshot, and MiniMax, saying it had found them all to be working to copy Anthropic models. All three of the labs are based in China. OpenAI has also accused DeepSeek of copying its technology. DeepSeek, which quickly rose in popularity among users after its launch last year, did not immediately respond to BBC requests for comment.
- sharing more information with US AI companies about tactics employed and actors involved in distillation campaigns
- working to better coordinate with companies to fight the attacks
- develop a set of best practices to identify, mitigate, and remediate them
- explore how the White House can hold foreign actors accountable for such distillation.
The memo did not detail any specific plans for action against foreign entities found to be undertaking distillation of US AI technology. A White House spokesperson declined to comment beyond the memo. A representative of China's US embassy in Washington DC took issue with the unjustified suppression of Chinese companies by the US in response to the memo. China is not only the world's factory but is also becoming the world's innovation lab, the representative added. China's development is the result of its own dedication and effort as well as international cooperation that delivers mutual benefits.
Distillation campaigns are carried out by firms that usually operate many thousands of individual accounts for a given AI chatbot or tool, allowing them to appear as normal users. Those accounts then undertake more coordinated attempts to jailbreak or otherwise expose information about AI models that is not supposed to be made public, which is saved and applied to their own AI model building and training. Kratsios stated, As methods to detect and mitigate industrial-scale distillation grow more sophisticated, foreign entities who build their AI capabilities on such fragile foundations should have little confidence in the integrity and reliability of the models they produce. While he did not name any foreign entities, leading AI companies like OpenAI and Anthropic have indicated they are dealing with such distillation activities. Earlier this year, Anthropic described distillation attacks by three AI laboratories, DeepSeek, Moonshot, and MiniMax, saying it had found them all to be working to copy Anthropic models. All three of the labs are based in China. OpenAI has also accused DeepSeek of copying its technology. DeepSeek, which quickly rose in popularity among users after its launch last year, did not immediately respond to BBC requests for comment.
