Covert Distillation: Moonshot’s Kimi K3 Allegedly Used 2 U.S. Models via Thailand Servers

From a cybersecurity perspective, the Moonshot case is a wake-up call: model distillation has become a potent form of cyber-enabled intellectual property theft. The alleged operation—switching between multiple access methods to avoid detection while siphoning outputs from two of the world’s most advanced AI models—mirrors classic advanced persistent threat (APT) techniques. Add the illicit use of Nvidia GB300 processors in Thailand to circumvent export controls, and you have a blueprint for how nation-state actors can erode America’s AI edge through infrastructure and API-layer attacks that fall outside conventional intrusion detection.

On July 23, 2026, a senior White House official leveled a grave accusation against China’s Moonshot AI, alleging that the startup engaged in “large-scale, covert industrial distillation” to steal proprietary technology from U.S. AI firm Anthropic and build its recently revealed Kimi K3 model. Michael Kratsios, director of the White House Office of Science and Technology Policy, charged that Moonshot developed a sophisticated platform to bypass detection while extracting capabilities from Anthropic’s Fable 5 and Mythos 5 models. The accusation adds a volatile chapter to the U.S.-China technology rivalry, directly linking intellectual property theft to Beijing’s rapid AI progress and raising urgent questions about export controls, cybersecurity, and the future of AI governance.

“

Michael Kratsios, director of the White House Office of Science and Technology Policy, charged that Moonshot developed a sophisticated platform to bypass detection while extracting capabilities from Anthropic’s Fable 5 and Mythos 5 models.

The timing is critical. Moonshot released Kimi K3 on July 17, 2026, and showcased it a day later at the World Artificial Intelligence Conference in Shanghai, claiming it was the largest openly available AI model ever built. Its arrival sent chip stocks tumbling in both Asia and the United States, as investors feared a commoditization of advanced AI. Within days, however, Moonshot reportedly could not keep the model running for new users due to a shortage of computing power, hinting at the immense infrastructure demands behind such systems. The White House now says that shortage may be explained by Moonshot’s alleged reliance on servers powered by Nvidia’s GB300 Blackwell processors – hardware subject to strict U.S. export restrictions – accessed through Thailand to circumvent sanctions.

Model distillation, the technique at the heart of the allegations, is not inherently illegal. In AI research, a smaller “student” model learns by mimicking the outputs of a larger “teacher” model, often to create more efficient versions. Kratsios, however, drew a sharp line: while academic and open collaborative distillation is accepted, “large-scale, covert industrial distillation aimed at stealing proprietary U.S. technology and undermining American research is unacceptable.” The U.S. government had already moved to protect Anthropic’s crown jewels. On June 12, an export control directive suspended foreign national access to both Fable 5 – Anthropic’s general-use model – and Mythos 5, a variant with the “strongest cybersecurity capabilities of any model in the world.” That suspension extended even to noncitizen Anthropic employees, underscoring the sensitivity of the technology.

Kratsios’s statement suggests a two-pronged breach: first, the unauthorized distillation of Anthropic’s models to train Kimi K3, and second, the illicit acquisition of cutting-edge Nvidia chips. Together, they form a blueprint for how a determined actor might erode U.S. technological advantages despite an escalating sanctions regime. The use of Thailand-based servers points to a classic sanctions-evasion playbook, raising the stakes for Washington’s enforcement capabilities. While Moonshot has not publicly responded, Beijing has historically dismissed similar allegations as politically motivated, insisting its AI advancements are homegrown.