Anthropic Blocks Six China-Linked Campaigns Harvesting 190M+ Claude CoT Traces via Proxy Networks

The campaigns targeted agentic workflows, kernel-level code, and long-horizon reasoning by routing user traffic through Singapore and Japan relays. GTG-16005 alone generated 151 million queries from 3,500 accounts, while Moonshot and DeepSeek silently forwarded customer sessions to Claude then replayed responses without consent. Transcripts included proprietary corporate data and state-affiliated queries, showing the harvested material was not generic but high-value operational knowledge.

Contract awards and job postings from the same labs reveal parallel investments in synthetic data pipelines and proxy infrastructure, indicating distillation is treated as a core capability rather than an ad-hoc tactic. Official Chinese statements frame these efforts as standard academic collaboration; procurement records and incident logs show consistent use of stolen payment rails and credential stuffing, patterns that match prior supply-chain compromises documented in 2024-2025.