1. News
  2. Alerts
  3. CrowdStrike · AI attacks
AlertCrowdStrike · AI attacks1 min read

China-linked hackers used AI to hit 200+ targets in 11 days

CrowdStrike says Chinese state-linked hackers used AI to go after 200+ organizations in 11 days. The speed is the point, and it affects ordinary businesses too.

By the Dashline deskSource: Techmeme
China-linked hackers used AI to hit 200+ targets in 11 days
Photo: Pauli Rautakorpi, CC BY 2.0
Act this week
What happenedCrowdStrike reports that Chinese state-linked hackers used AI tools, including a DeepSeek model, to target over 200 organizations in 11 days and compromise at least nine.
Who is affectedGovernments and businesses around the world were targeted, so any organization with online systems could be a potential target.
What to do
  1. 1Install software and security updates as soon as they come out.
  2. 2Turn on two-step login for email, banking and work accounts.
  3. 3Use a unique password for each account, ideally with a password manager.
  4. 4Train staff to report odd emails or login alerts to your IT contact right away.

Hackers linked to the Chinese government used artificial intelligence to attack more than 200 organizations around the world in just 11 days, according to the security company CrowdStrike. At least nine of those targets were compromised, meaning the hackers got in.

What happened

CrowdStrike says the hackers used an AI tool called ARTEX. It ran a model from DeepSeek, a popular AI system, along with another model. The targets included governments and businesses. The campaign shows how AI lets attackers work at a scale that used to take far more human effort.

Who it affects

Governments and companies were named as targets, so any organization with online systems could be on a list like this. Most of the 200-plus targets were not compromised, which shows that defenses can hold. Still, a faster attacker can try more doors in less time.

What we do not know yet

The material available does not say which organizations were hit, which countries they were in, or how the nine were breached. It also does not explain how the AI tool was used at each step. Those details may come out as CrowdStrike and others share more.

What to do

The alert box above lists simple steps to take now. They are basic habits, and they matter more when attackers can move quickly. Check them with whoever handles your technology, whether that is staff or an outside IT contact.

The takeaway

AI helps attackers move faster, so keep updates current, use two-step login and unique passwords, and report odd emails right away.

More articles

You should really read these.

Next step

Let’s talk