Posts detail Zhipu and Moonshot campaigns, including 151M Alibaba-linked conversations and 300K Kimi requests rerouted to Claude
Two posts on X report that Anthropic has published details of large-scale attempts to distill its Claude model, naming DeepSeek, Moonshot, and MiniMax as the labs behind the campaigns. The first post, by user stretchcloud, says Anthropic identified more than 16 million exchanges with Claude run through roughly 24,000 fraudulent accounts, aimed at harvesting outputs to train rival models. The post attributes the claims to Anthropic, citing IP correlation, request metadata, and infrastructure fingerprints. It also quotes Anthropic's official account: 'Over the last few months, we've made significant progress in reducing the effectiveness of distillation attacks against Claude.' The post adds that Anthropic has cut the effectiveness of these campaigns sharply using rate limits and behavioral detection, and notes the economics: training a frontier model can cost over $100 million, while distillation costs a fraction. A second post, by user 24moonbridge, reports additional details from Anthropic's announcement, focusing on Chinese labs. It says Zhipu and Moonshot were 'publicly executed' for industrial-scale theft of Claude's chain-of-thought. The post provides figures: with full chain-of-thought, SWE-bench reaches 80.4%, versus 71.8% with simplified answers, an 8.6-point gap. It describes three attack vectors: Alibaba-affiliated operations from May to July with 151 million conversations, a peak of 3 million per day, and 3,500 fake accounts; Moonshot rerouting 300,000 user requests from Kimi to Claude over 10 days; and Zhipu running 3.4 million requests over 17 days with 273 accounts targeting Claude Fable 5's cybersecurity capabilities. The post also reports Anthropic's countermeasures, including locking reasoning context, a two-stage constitutional classifier with false-positive rate below 0.1%, and charging for blocked requests starting September 24. It claims stolen data volume was cut by 90%–99%, at the cost of rejecting trillions of tokens of paid traffic. Both posts are reports of Anthropic's announcement; the second post includes a note that one Moonshot request came from a user with suspected PLA background, but this is not independently verified. The posts do not provide independent confirmation of Anthropic's claims.