CrowdStrike is warning that China-linked hacking groups are increasing attacks on technology companies in pursuit of artificial intelligence capabilities and intellectual property, according to the cybersecurity firm.
The company framed the activity as part of Beijing’s broader effort to narrow its technology gap with the United States, though that assessment has not been independently verified. CrowdStrike said China-based entities accounted for more than half of state-sponsored attacks on technology firms seeking AI-related assets.
What CrowdStrike Said It Found
CrowdStrike said its analysis covered activity over the 12 months through March 31, a time frame that has not been independently verified from the provided source material. The firm said China-affiliated cyber activity targeted government communications in Southeast Asia and maintained access to North American technology organizations by exploiting vulnerabilities. Those details remain CrowdStrike’s assessment rather than independently confirmed facts.
The warning comes as U.S. restrictions on China’s access to advanced AI training chips have been described by the source as a constraint on Beijing’s technology development. At the same time, Chinese AI developers have promoted lower-cost models that they say can compete with leading systems, though the source does not provide enough verified detail to measure those claims directly.
Broader Pressure on Tech Firms
The report adds to concerns among U.S. technology companies that AI research, model behavior, and proprietary infrastructure are becoming priority targets for state-linked espionage. Earlier in the year, Anthropic and OpenAI complained that Chinese companies had extracted competitive intelligence from U.S. AI firms, while analysts cautioned that the line between aggressive competitive research and illicit activity can be difficult to define.
CNBC reported that China’s Cyberspace Administration did not immediately respond to its request for comment; that response status has not been independently verified here.
CrowdStrike also said North Korea-affiliated actors tried to infiltrate IT workforces across North America, Europe and Asia, primarily to raise revenue for the regime.