Chinese hackers have discovered a way to commandeer autonomous attacks using DeepSeek, an open-source tool designed to find and exploit software vulnerabilities. The attackers are leveraging Telegram’s messaging platform to execute these attacks, which raises concerns about the potential for AI-facilitated cyber threats.
DeepSeek is a type of artificial intelligence (AI) model that can scan large codebases for vulnerabilities. Developed by researchers at the University of California, Berkeley, the tool uses machine learning algorithms to identify potential weaknesses in software applications. However, hackers have now found a way to repurpose DeepSeek’s capabilities for malicious purposes.
According to reports, Chinese hackers are using Telegram to send commands to compromised devices, instructing them to launch autonomous attacks on unsuspecting targets. This development highlights the dual-edged nature of AI in cybersecurity – while AI models like DeepSeek can be powerful tools for identifying vulnerabilities, they can also be hijacked by malicious actors.
The use of Telegram in these attacks underscores the platform’s potential as a vector for command and control (C2) operations. With millions of users worldwide, Telegram offers a vast network for hackers to transmit commands and instructions to compromised devices. This raises concerns about the security of organizations that rely on the platform for communication.
Moreover, the fact that DeepSeek is being used to launch autonomous attacks highlights the growing threat of AI-facilitated cyber threats. As AI models become increasingly sophisticated, they can be repurposed by hackers to carry out complex and highly targeted attacks. This development underscores the need for organizations to stay vigilant in their cybersecurity efforts and to develop strategies for mitigating AI-driven threats.
The implications of this story are far-reaching, with potential consequences extending beyond individual organizations to entire industries and societies. As AI continues to play a larger role in our lives, it is crucial that we prioritize security and resilience in the face of emerging threats.
To stay ahead of these threats, cybersecurity professionals should focus on developing robust incident response plans and conducting regular vulnerability assessments. Moreover, they should work closely with their development teams to implement robust security measures, such as input validation and secure coding practices. By doing so, organizations can reduce their exposure to AI-facilitated cyber threats and stay one step ahead of malicious actors.
Source: The Hacker News — 2026-07-31