The Independent: Feroot Security Uncovers DeepSeek’s Hidden Code Sending User Data to China

February 5, 2025

DeepSeek’s AI Model Sparks Security Concerns Amid U.S. Scrutiny

Today’s investigation by cybersecurity firm Feroot Security has revealed that DeepSeek, a widely popular artificial intelligence model developed in China, contains hidden code capable of transmitting user data to China Mobile’s online registry, CMPassport.com. This revelation raises significant privacy and national security concerns, particularly as China Mobile is a state-controlled telecom company previously delisted from the New York Stock Exchange due to security risks.

DeepSeek’s Hidden Data Transmission

Feroot Security researchers examined the browser-based version of DeepSeek and uncovered encrypted code designed to send user data to CMPassport.com. This discovery suggests that the app may be facilitating unauthorized data collection on a global scale.

“We see direct links to servers and to companies in China that are under control of the Chinese government. And this is something that we have never seen in the past,” Feroot CEO Ivan Tsarynny told ABC News.

Beyond data transmission, the AI-powered app also creates a digital fingerprint of users, tracking their activity across multiple websites. Such tracking capabilities significantly heighten the risk of personal data being monitored by foreign entities.

Growing National Security Concerns

DeepSeek’s disclosure of storing user data in China had already sparked privacy concerns. However, the newly discovered direct connection to a Chinese government-controlled telecom further exacerbates fears surrounding data security and potential state surveillance.

Former Homeland Security and National Security Agency official Stewart Baker compared DeepSeek’s risks to those of TikTok but warned that the AI chatbot may pose an even greater threat: “It raises all of the TikTok concerns plus you’re talking about information that is highly likely to be of more national security and personal significance than anything people do on TikTok.”

Senator Josh Hawley of Missouri recently introduced legislation aimed at restricting U.S. individuals and businesses from advancing AI capabilities in China, largely seen as a direct response to DeepSeek’s growing influence. The bill proposes strict penalties for violations, including up to 20 years in prison and fines reaching $100 million for corporations.

DeepSeek’s Influence on the AI Industry

DeepSeek’s emergence has had profound effects on both the geopolitical and economic landscapes. The release of its free, high-powered AI model reportedly led to over $1 trillion in losses in the global stock market, as it challenged the dominance of more capital-intensive U.S. AI firms like OpenAI.

“DeepSeek’s release of a premium level AI tool, available freely, with a reported (comparatively) miniscule development cost has shaken faith in Silicon Valley and American dominance in the rapidly developing AI market,” said Dr. Richard Whittle, an economist from the University of Salford.

Meanwhile, the app’s content moderation policies have also drawn scrutiny. Users have reported that DeepSeek either refuses to answer or provides carefully curated responses on sensitive topics such as Chinese President Xi Jinping, the persecution of Uyghur Muslims, and the Tiananmen Square massacre.

A Global Crackdown on DeepSeek?

The security concerns surrounding DeepSeek have prompted swift action. The app has already been banned in Italy, as well as by institutions such as the U.S. Navy and NASA. The U.S. government is now considering broader measures, including a potential nationwide ban, similar to the actions taken against TikTok.

Former President Donald Trump described DeepSeek’s rise as a “wake-up call” for Americans regarding China’s growing technological influence.

The impact of DeepSeek’s launch has also pushed American companies like Google to reconsider their stance on AI applications. Recent reports indicate that Google has modified its AI guidelines to permit its use in security and defense applications, citing global competition as a driving factor.

As regulatory bodies continue to scrutinize foreign AI services, Feroot Security remains at the forefront of exposing cybersecurity threats, ensuring transparency and user protection in an increasingly complex digital world.

Free Assessment

Security for Everyone that Visits Your Website

Find out if your web application is hiding vulnerable, malicious, or dangerous code that could damage your customers and your business. No payment information required.