Feroot CEO Warns About DeepSeek’s Data Practices and National Security Risks
On CNBC, Feroot Security CEO Ivan Tsarynny highlighted alarming cybersecurity concerns regarding DeepSeek’s AI chatbot, which has rapidly gained popularity in the U.S. In his discussion, Tsarynny detailed the security risks posed by DeepSeek’s login system, revealing that user data may be exposed to China Mobile, a state-owned telecommunications company.
DeepSeek’s Connection to China Mobile
During the CNBC segment, Tsarynny explained that DeepSeek’s website includes embedded software code that interacts with a previously unidentified Chinese server, cmpassport.com, linked to China Mobile. This discovery raises significant concerns, as China Mobile has well-documented ties to the Chinese government.
“When users log into the DeepSeek website, the code on the site has built-in capabilities to transfer user information to cmpassport.com, which is controlled by China Mobile,” Tsarynny stated. “This is a major red flag from a cybersecurity standpoint.”
Should Users Be Concerned?
When asked about his own use of DeepSeek, Tsarynny confirmed that neither he nor anyone at Feroot Security actively uses the platform, except for research purposes.
A CNBC host who attempted to sign in using Google expressed concerns about whether they had unknowingly exposed their data. Tsarynny advised users to proceed with extreme caution. While deleting the app may remove some risk, it does not undo potential data exposure that could have already occurred during registration or login attempts.
DeepSeek vs. TikTok: A Bigger Concern?
Comparisons to TikTok were inevitable. Tsarynny pointed out key differences between DeepSeek and ByteDance’s social media platform, as well as a stark contrast between DeepSeek and U.S.-based AI services like OpenAI’s ChatGPT and Google’s Gemini.
“Unlike TikTok, which collects behavioral analytics, DeepSeek is handling highly sensitive and proprietary information from users,” Tsarynny noted. “When using DeepSeek, some data is being transmitted to Chinese infrastructure, including pixels linked to Baidu, a company with similarities to TikTok’s data collection methods.”
He contrasted this with American AI platforms: “When using ChatGPT or Gemini, all user information remains within U.S. borders, ensuring compliance with American data protection regulations. That’s a big distinction.”
