AI Intellectual Property Theft
Sub-technique of AML.T0048 — External Harms
Adversaries may exfiltrate AI artifacts to steal intellectual property and cause economic harm to the victim organization.
Proprietary training data is costly to collect and annotate and may be a target for Exfiltration and theft.
AIaaS providers charge for use of their API. An adversary who has stolen a model via Exfiltration or via Extract AI Model now has unlimited use of that service without paying the owner of the intellectual property.
> curated attacks (2)
Model Distillation Campaigns Targeting Anthropic Claude
Anthropic uncovered competitor labs harvesting Claude's outputs at scale — roughly 24,000 accounts and 16 million queries — to distill its agentic reasoning, code, tool-use, and computer-use capabilities into rival models. Model theft by imitation, laundered through ordinary API access.
Organization Confusion on Hugging Face: Impersonation to Reverse Shell
A researcher registered Hugging Face organization accounts impersonating real companies. Employees uploaded private models to the fake orgs — which could be swapped for poisoned models carrying reverse-shell payloads that execute when loaded.