Case openai-vixen-keyhole-pandaState actor AI opsUnited States
OpenAI bans APT15 and APT5 accounts using ChatGPT for pentest automation and US recon
Chinese state groups Vixen Panda (APT15) and Keyhole Panda (APT5) used ChatGPT for script edits, system configuration, pentest automation and Android social-media tooling while researching US defence and telecom targets.
MediumAttack using AIStatus: ContainedVerified case file
Open in the interactive mapCite this case
- Reported
- Jun 9, 2025
- Location
- United States
- Target
- US defence and telecom infrastructure
- Severity
- Medium
- Triggered by
- Vixen Panda (APT15) and Keyhole Panda (APT5)
- Actor type
- State-sponsored
- Reported loss
- None reported
- CVE
- None
What happened
Chinese state groups Vixen Panda (APT15) and Keyhole Panda (APT5) used ChatGPT for script edits, system configuration, pentest automation and Android social-media tooling while researching US defence and telecom targets.
Impact: Incremental uplift only, per OpenAI; targeting of US defence and telecom sectors confirmed.
Who triggered it
Actor: Vixen Panda (APT15) and Keyhole Panda (APT5)
Attribution: OpenAI attributed the accounts to the two China-nexus groups with industry input.
Motive: Espionage against US infrastructure
How it happened
Attack vector: LLM assistance across reconnaissance, tooling and automation stages
Root cause: Productivity use of a public model by state operators; no capability beyond public tools
Timeline
- Press coverage notes four of ten June 2025 cases likely originated in China
- OpenAI publishes the case and bans the linked accounts
Response
Accounts banned; findings shared with partners.
Current status: Contained
Sources (open in a new tab)
- OpenAI June 2025 report PDF cdn.openai.com
- Security Affairs coverage securityaffairs.com
Cite this case
OpenAI bans APT15 and APT5 accounts using ChatGPT for pentest automation and US recon. AI Threat Watch, case openai-vixen-keyhole-panda, Jun 9, 2025. https://aithreat.io/cases/openai-vixen-keyhole-panda/
Permanent link: https://aithreat.io/cases/openai-vixen-keyhole-panda/