Skip to content
Submit incident
AII-1001-25247
ConfirmedA court, a regulator or the organization itself has stated the core facts, or the record cites a court or regulator source.

Malicious AI Skills in China Enable Jailbreaking and Illegal Crypto Mining

China's state emergency center warned on 9 June 2026 that malicious AI Skills are being distributed to trick users into bypassing large language model safety guardrails or using their devices for unauthorized cryptocurrency mining. The Skills pose risks of generating illegal content, account bans, device degradation, and involving users unwittingly in money laundering.

9 June 2026 · 国家互联网应急中心 (CNCERT) · Security and cyberattacks
9 June 2026
AII-1001-252472 sources ↓
Quick facts
Category
Security and cyberattacks
Country
China
Source
驱动之家
Date
9 June 2026
Drafted by
Raidu Incident Detection

What happened

The National Internet Emergency Center (CNCERT) reported that malicious AI Skills are being distributed openly with names like 'large model jailbreak' and 'mining to earn money,' designed to entice users to break through large model safety restrictions or illegally occupy device resources for cryptocurrency mining.

Reported impact

These malicious Skills can cause models to generate unlawful information, lead to user accounts being banned, reduce device performance, and passively involve users in money laundering and other illegal activities, seriously harming personal legal rights and endangering network security.

Governance controls

CNCERT advised users to obtain Skills only from official channels and not to install or use any skill packages claiming to provide 'jailbreak' or 'bypass restrictions' capabilities.

The center recommended that users grant minimal permissions, revoke sensitive permissions promptly, regularly remove unused Skills and sensitive conversation records, and enable multi-factor authentication. Enterprise users were advised to establish whitelist mechanisms for Skills, conduct security checks before deployment, prioritize isolated network deployment, implement data classification and masking, and use temporary authorization policies.

Classification

Category
Security and cyberattacks
Industry
Digital security
Country
China
Harm status
Potential harm
Intent
Intentional
Timing
Unknown
Harm types
Economic or property, Public interest
Harmed
General public, Consumers
Failure modes
Jailbreak, Unsafe autonomous behaviour, Manipulation or dark pattern
AI systems
AI Agent Skills

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

驱动之家
国家互联网应急中心:部分智能体Skills暗藏越狱与挖矿风险
9 June 2026
每日经济新闻
国家互联网应急中心提醒:部分智能体技能包(Skills)存在越狱和挖矿风险
9 June 2026