🎯 Threat Intelligence

Google GTIG's Latest: AI Distillation Attacks Spike as Hackers Clone Models and Build Smarter Malware

Threat actors aren't just using AI; they're stealing it. Google's GTIG details a wave of distillation attacks and new AI-malware hybrids that could reshape cyber ops.

Infographic of rising AI model distillation attacks tracked by Google GTIG in 2025

⚡ Key Takeaways

  • Model distillation attacks surged in 2025, mainly from private entities—not APTs yet. 𝕏
  • DPRK, Iran, PRC, Russia use LLMs for faster recon and phishing; new malware like HONESTCUE integrates APIs. 𝕏
  • Google disrupts via bans and hardening, but underground jailbreak services signal growing ecosystem. 𝕏
Published by

theAIcatchup

Threat intelligence. Zero noise.

Worth sharing?

Get the best Cybersecurity stories of the week in your inbox — no noise, no spam.

Originally reported by Mandiant Blog

Stay in the loop

The week's most important stories from theAIcatchup, delivered once a week.