Charcoal Typhoon used LLMs for tooling and social-engineering research
What they were trying to do
- 01
Research companies and cybersecurity tools to support technical operations
- 02
Develop and debug scripts for tooling
- 03
Generate content for use in social engineering against targets in government, education, communications, and energy sectors
How they did it
Charcoal Typhoon conducted what the disclosure characterises as 'limited exploration of how LLMs can augment their technical operations,' using the model for tooling development, scripting, understanding commodity cybersecurity tools, LLM-refined operational commands, and generating content that could be used to social-engineer targets.
Example queries
Verbatim excerpts from the disclosure — only what the vendor actually published.
Not detailed in the disclosure
What they achieved
Concrete outputs obtained before platform disruption.
- before disruption
Technical scripting and tooling development support
- before disruption
Understanding of commodity cybersecurity tools
- before disruption
Social-engineering content generation
OpenAI disabled all accounts and assets associated with Charcoal Typhoon.
Full summary
PRC-affiliated intrusion set Microsoft tracks as Charcoal Typhoon (also reported as CHROMIUM) used OpenAI services for research into companies and cybersecurity tools, code debugging, generating phishing-relevant content, and translation tasks. OpenAI disabled the associated accounts.
AI platforms involved
Related incidents (same country or vendor label)
- CN · China
GTG-1002: first publicly disclosed AI-orchestrated cyber espionage campaign (PRC state-sponsored)
2025-11-13Anthropic - CN · China
APT41 and 20+ PRC-affiliated clusters used Gemini for post-compromise scripting and EDR reverse engineering
2025-01-29Google (GTIG) - CN · China
SweetSpecter spear-phished OpenAI employees while using ChatGPT for recon
2024-10-09OpenAI - CN · China
Spamouflage Chinese influence operation used LLMs to draft posts
2024-05-30OpenAI - CN · China
Salmon Typhoon used LLMs for translation and intel-agency research
2024-02-14Microsoft + OpenAI
Source note: Every entry in this catalog is derived from a primary public disclosure by the named platform vendor. This entry cites Microsoft + OpenAI as the primary source. No private, speculative, or non-public claims are presented here.