The Chinese company DeepSeek, advancing in the field of artificial intelligence, has encountered a wave of large-scale DDOS attacks, which seriously violated the operation of its services. The attacks on the infrastructure began shortly after the release of the DeepSeek-R1 model, which became a worthy competitor to the developments of Openai and proposed a more affordable solution in the field of generative AI.
according to this NSFOCUS researchers, attacks on the DeepSeek API-interface were recorded on January 25, 26 and 27, and the attackers used NTP and MemCeched reflexion. The average duration of attacks was 35 minutes, and the attacks themselves led to failures in the work of the company’s services. Deepseek-R1 offers users wide possibilities for generating dialogs and auto-election, which makes the platform attractive for developers.
The attacks on the Deepseek chat system and January 25 were additionally recorded, and their duration exceeded one hour. At the same time, the company introduced its new model, which is characterized by an improved learning process with reinforcement and high accuracy in mathematical and software tasks.
The situation worsened on January 28, when the DeepSeek team announced a large-scale cyberatak that forced the company to change the IP address to protect the infrastructure. However, the criminals promptly adapted and launched a new wave of attacks, including CLDAP reflective attacks. The main domains of DeepSeek again became the victims, and the work of the API platform remained paralyzed.
Experts note the high organization and accuracy of the actions of attackers. Switching IP addresses did not save from attacks, since criminals instantly reacted and corrected tactics. NSFOCUS indicates that the attack is international in nature: threat sources are in the USA, Great Britain and Australia. The use of distributed servers makes it difficult to identify performers, which is typical of professionally organized attacks.
This attack emphasizes the importance of Deepseek in the world market and demonstrates the complexity of the competition in the technological field. In addition to the development of new models, companies have to pay more and more attention of cybersecurity in order to withstand targeted attacks. In modern conditions, protection infrastructure becomes an integral part of the success of technological companies.