MITRE ATLAS
mitre-atlas-cs0076
Industrial-Scale Distillation Across U.S. Frontier AI Services
- Copilot & SaaS
- AI Infrastructure
- Model Theft & Capability Extraction
NSA, CISA and FBI attributed coordinated distillation campaigns to six China-based AI companies. Their September 2026 advisory describes fraudulent accounts, bulk subscriptions, gray-market proxies, cross-provider routing, request-metadata removal and hidden-reasoning prompts, followed by response collection and quality checks. Distillation trains a model from another model’s outputs; the advisory’s attribution and capability-assessment claims are attributed to the agencies, not presented as independently reproduced measurements or model-weight theft.
Mapped threat techniques
AML.T0021Establish AccountsAML.T0008.005AI Service ProxiesAML.T0012Valid AccountsAML.T0140Centralized AI Service Request RoutingAML.T0141AI Service Request Metadata SanitizationAML.T0063Discover AI Model OutputsAML.T0065LLM Prompt CraftingAML.T0051.000DirectAML.T0054LLM JailbreakAML.T0024Exfiltration via AI Inference APIAML.T0135Outputs from AI ModelsAML.T0042Verify AttackAML.T0005.001Replicate Behavior from Model OutputsAML.T0048.004AI Intellectual Property Theft