China warns against malicious AI skills that mine crypto and evade guardrails
On Tuesday, China's National Computer Network Emergency Response Coordination Centre (CNCERT) alerted the public through its official WeChat account about third-party AI 'skills' packages. These packages falsely advertise their ability to circumvent safety measures and produce forbidden content or offer cryptocurrency-mining capabilities. Functioning like smartphone applications, these skills are essentially plug-ins or code enhancements for AI. CNCERT cautioned about the swift rise of a grey market for unregulated AI extensions, emphasizing that utilizing such tools could lead to privacy violations, account suspensions, and potential legal ramifications. The agency recommended that users acquire skills solely from official sources, adhere to the principle of least privilege for permissions, and swiftly revoke unnecessary access to sensitive information.
Key facts
- CNCERT issued warning on Tuesday via WeChat account
- Malicious AI skills can bypass safety guard rails and generate prohibited content
- Skills can provide access to cryptocurrency-mining functions
- Cryptocurrency mining remains banned in mainland China
- Skills function as plug-ins or code packages for AI agents and models
- Grey market for unregulated AI extensions is rapidly emerging
- Using such tools risks privacy breaches, account suspensions, legal consequences
- Users should obtain skills only through official channels and follow least privilege principle
Entities
Institutions
- National Computer Network Emergency Response Coordination Centre (CNCERT)
Locations
- China
- mainland China