Chinese Hackers Used DeepSeek AI Agents to Attack 200+ Organizations

A report published on October 31 says Chinese hackers used AI agents and DeepSeek models to attack more than 200 organizations, placing a large language model at the center of an intrusion campaign rather than at its edges.

The most concrete figure in the account is the scale of the target list: more than 200 organizations. That points to a broad, repeatable operation rather than a single hand-run intrusion, although the available information does not say which industries or countries the victims came from.

The more significant detail is the role of the AI agent. An agent is not a chat interface; it can call tools and carry out multi-step tasks in sequence. Wired into an offensive workflow, it turns reconnaissance, validation and repeated attempts into steps that can run in parallel, with human involvement squeezed to a minimum.

Security researchers have spent the past two years talking about the cost curve of attack. Manual intrusion consumes people and time. If agents can compress that work into a pipeline, the cost per target falls while the volume of activity defenders must triage rises.

The model named in the report matters as well. DeepSeek being used offensively suggests that widely available models which can be run on infrastructure the attacker controls are becoming part of the attack stack; that is harder to trace or cut off than abuse of a single closed commercial API.

Public information remains thin. No timeline, specific vulnerability or victim list has been disclosed, so the claim is best read as a trend signal rather than a complete battle report. What to watch: whether other security firms reproduce the findings, whether victims cluster in particular industries, and whether regulators begin to address agentic offensive tooling directly.

For defenders, the practical response is still unglamorous: shrink the exposed surface, govern credentials and permissions, and detect abnormal automated traffic. AI agents do not make that work obsolete; they make it more urgent.