Kuaishou
Incident posture
Timeline
Summary
Kuaishou experienced a cyberattack that flooded its livestreaming service with pornographic and violent content for roughly 90 minutes, affecting hundreds of millions of users. The company attributed the attack to underground and gray industries, reported it to police, and said operations gradually returned to normal. According to a Chinese cybersecurity firm, the assault used AI‑driven automation and about 17,000 bot accounts, and the incident caused the firm’s Hong Kong‑listed shares to fall as much as 6%.
Motives
Detailed motive labels are available to members.
TTPs
Detailed technique labels are available to members.
Description
Around 10 p.m. on Monday, Kuaishou’s livestreaming service was flooded with thousands of pornographic and violent videos, an attack that lasted approximately ninety minutes. The surge of prohibited content shocked hundreds of millions of users across China, prompting immediate complaints on Weibo about the sudden appearance of explicit material. Kuaishou, which reported more than 416 million daily active users in its third‑quarter release, is the country’s second‑largest short‑video platform after Douyin. The unexpected influx disrupted the normal viewing experience for a large portion of the platform’s audience.
In a Tuesday statement, Kuaishou attributed the incident to underground and gray industries and said it had reported the attack to the police. The company noted that its app gradually resumed normal operations after the ninety‑minute disruption. China Daily, citing the cybersecurity firm QAX, reported on Wednesday that the attack was powered by artificial intelligence, involved the compromise of user data, and relied on roughly seventeen thousand bot accounts to stream the illicit content. The bot networks were used to bypass security systems and paralyze the livestreaming service, according to the same source. Kuaishou’s Hong Kong‑listed shares fell as much as six percent on Tuesday following the publicity of the attack.
The incident occurred amid a broader debate in China over proposed amendments to internet content rules that would increase penalties for spreading obscene material, including private forwarding. State broadcaster CCTV intervened on Wednesday to clarify that sending obscene photos to friends does not constitute a new criminal offense under the amendment, noting that such acts were already technically illegal under existing law but rarely prosecuted without a complaint. Cybersecurity experts at QAX emphasized that the scale of the damage stemmed from automated attack tools that enable rapid bulk account creation and botnet deployment, overwhelming manual review mechanisms. The event highlighted the persistent challenge of defending large‑scale platforms against coordinated, automated threats despite China’s extensive internet censorship apparatus.
Sources
Sources available to members: 1 source.