China-based AI company DeepSeek has been hit by a cyber attack. The company confirmed the intrusion on its daily status page, with the latest update mentioning a “large-scale malicious attack” targeting its services.
The DeepSeek security incident has temporarily halted registrations. Existing users are not affected and can log in as usual. The source of the attack and damage remains unknown at this moment.
Based on the status updates page, DeepSeek web services were unavailable on January 14. However, the issue was resolved the same day. On January 26, DeepSeek R1 API experienced issues, which were also marked resolved later that day.
A series of incidents were reported on January 27 related to the following:
Later on the same day, the company updated the page, citing degraded performance with reference to DeepSeek API, which remains under review.
TechNadu reported about the latest AI model series, the DeepSeek R1, being cloned by cybercriminals – with eight phishing websites impersonating the tool.
The cybercrime threat intelligence firm KELA flagged several issues with the DeepSeek R1 model that produced malicious outputs, including ransomware deployment.
Although AI models are being trained not to share malicious content, researchers managed to jailbreak and retrieve sensitive content like detailed instructions for creating toxins and explosive devices.
They also found that the model could be made to share fabricated information like emails, phone numbers, salaries, and nicknames of senior OpenAI employees.