315 Exposes AI Poisoning, a Business from Putian to Silicon Valley

比推Pubblicato 2026-03-16Pubblicato ultima volta 2026-03-16

Introduzione

"315 Exposed: AI 'Poisoning' - A Business from Putian to Silicon Valley" During China's 315 consumer rights expose, a practice called Generative Engine Optimization (GEO) was revealed. GEO involves manipulating AI-generated responses by flooding the internet with promotional content, which AI models then scrape and present as factual recommendations. A tool called "Liqing GEO," sold on Taobao, demonstrated this by fabricating a fake smartwatch with absurd features ("quantum entanglement sensing," "black hole-level battery") and having AI recommend it within hours. This mirrors the early days of Search Engine Optimization (SEO), where paid rankings, notably by Putian-based hospitals on Baidu, dominated search results. Despite regulations, the core model remains: whoever controls the information gateway sells rankings. Now, with AI as the new gateway, SEO has simply become GEO. The business is significant. BlueFocus, a major marketing firm, invested millions in a GEO company, PureblueAI, serving clients like Ant Group and Volvo. While Pureblue claims to optimize real brand information, the technical method—flooding the web with content for AI to scrape—is identical to the "poisoning" tactic. This ambiguity fueled a stock market frenzy in late 2025, with GEO-related stocks like BlueFocus surging over 130% before executives cashed out. Simultaneously, Silicon Valley is formalizing this model. OpenAI announced ads in ChatGPT for free users, with sponsored links appearing below...

Author: David, Deep Tide TechFlow

Original Title: 315 Exposes AI Poisoning, a Business from Putian to Silicon Valley


Last night, 315 exposed a business based on GEO.

Full name: Generative Engine Optimization. You can understand it as:

Paying to have AI say nice things about you.

How is it done?

Brands want AI to prioritize recommending them when consumers ask. So they find GEO service providers, who batch-publish promotional soft articles online. After AI crawls this content, it treats it as real information and recommends it to users.

A CCTV reporter used a software called "Liqing GEO," which can be bought on Taobao.

The reporter fabricated a smart wristband and made up several outrageous product features, like "quantum entanglement sensing" and "black hole-level battery life." The software automatically generated over a dozen promotional soft articles and published them online.

Two hours later, the reporter asked an AI: "Can you recommend a smart health wristband for me?"

The AI ranked this non-existent wristband at the top of the recommendation list.

The company behind this software is Beijing Lisi Culture Media, a one-person company with zero insured employees for many consecutive years.

A tool made by such a company fooled mainstream domestic AI models in just two hours.

315 uncovered AI poisoning, but this business might be much bigger than a single Taobao software.

SEO, the Putian Story

First, this is not new at all.

In 2008, CCTV's "News 30 Minutes" exposed Baidu's paid ranking for two consecutive days. Paying money could get your website to the top of search results, even if it was for fake medicine.

Back then, this business was called SEO, Search Engine Optimization.

The biggest buyers were Putian-affiliated private hospitals. In 2013, Putian系 spent 12 billion RMB on Baidu advertising, accounting for nearly half of Baidu's total ad revenue.

Many unqualified medical institutions used SEO to boost themselves to the first page of Baidu search results, appearing alongside Class A tertiary hospitals, making it impossible for ordinary people to tell the difference.

It wasn't until the 2016 Wei Zexi incident, where a university student died after seeking treatment at a top-ranked Putian hospital, that regulators legislated clearly: paid search is advertising.

But this didn't kill the business. It just set the rules, turning it from a gray market operation into a legitimate business. Putian系 still buys rankings, but there's a small label next to the result: "Ad."

But even with the label, people who would click still click.

The fundamental problem with search engines was never the labeling, but users' inherent trust in the top results.

Now people have moved from search engines to AI, thinking AI is more objective and不会被 (won't be) polluted by paid rankings. But whoever controls the gateway to information distribution can sell rankings.

The gateway changed, SEO changed a letter to become GEO, but the logic of selling rankings hasn't changed one bit.

What changed is the price.

GEO, Loved by the Capital Market

Businesses that can't be killed are the capital market's favorite.

In September 2025, BlueFocus, China's largest marketing communication company, invested tens of millions of RMB in a GEO company called PureblueAI Qinglan.

Qinglan helps real brands optimize their ranking and recommendation rate in AI search results. Clients include Ant Group, Tencent Cloud, and Volvo.

The products are real, the company is real, and they work to help AI understand brand information more accurately.

This is completely different from the AI poisoning exposed by 315 involving Liqing. Liqing fabricated products, made up parameters, and tricked AI with false information; Qinglan uses real brand content to adapt to AI's recommendation logic.

But from AI's perspective, the technical path for both things is the same: both involve publishing content online and waiting for AI to crawl it.

AI can't tell which is marketing and which is fabrication. This is the most ambiguous aspect of the GEO business.

When BlueFocus invested in Qinglan, GEO was just an industry term within marketing circles. Three months later, it became a stock market concept.

At the end of December 2025, BlueFocus's stock price hit the daily limit-up.

Brokerages began holding intensive conference calls to interpret GEO, with research reports defining it as "the next generation traffic entrance in the AI era." Capital poured in, not only buying BlueFocus but also driving up stocks of any company related to digital marketing and AI concepts. BlueFocus rose 132% in 9 trading days, and a batch of follower concept stocks also doubled.

Image Source: CLS News

After the surge, these companies issued risk warnings themselves:

GEO business has no revenue and has no significant impact on company operations. BlueFocus also admitted that AI-driven revenue accounts for a very small proportion of overall revenue.

The implication is that the stock price more than doubled, but the GEO business itself hasn't made much money yet.

At the end of January, BlueFocus's stock price rose from 9.6 yuan to 23.3 yuan, a 143% increase in a month. Right at this time, Chairman Zhao Wenquan announced plans to sell up to 20 million shares. Based on the stock price at the time, this would cash out approximately 467 million RMB.

Public research reports show that last year, the total market size of the domestic GEO industry was about 2.9 billion RMB. The market value increase of BlueFocus's stock alone in one month far exceeded this amount.

315 exposed Liqing system poisoning AI for a few hundred RMB. But the GEO concept went through A-shares and made billions.

Whether it's poisoning or not is hard to say, but the money made is real.

315 Calls it Poisoning, Silicon Valley Calls it Commercialization

In January this year, OpenAI announced on its official blog: ChatGPT will start selling ads.

Free users and $8/month Go users will see ads; paid subscription premium users are unaffected.

On February 9th, ads officially launched. Some ads appear at the bottom of ChatGPT's answers, marked with a small word: Sponsored. The first batch of advertisers includes Ford, Adobe, Target, Best Buy...

You ask ChatGPT what car is good to buy, it gives you an answer, and below the answer hangs a sponsored link from Ford.

OpenAI made it very clear: Ads will not influence the content of ChatGPT's answers. The answer is the answer, the ad is the ad, they are separate.

Does that sound familiar?

Baidu said the same thing back in the day. Paid ranking is paid ranking, organic search is organic search, they are separate. Later, the top five search results were all ads.

OpenAI expects ads to help double its consumer-side annual revenue to $17 billion. ChatGPT has over 800 million weekly active users, 95% of whom are free users, all potential audiences for ads.

Now looking back at the industry chain exposed by 315: Liqing floods AI with soft articles, making AI recommend non-existent products. OpenAI places sponsored content below AI's answers, making AI recommend products that paid money.

One didn't notify the platform, it's poisoning. One signed a contract with the platform, it's commercialization.

For the user, what's the difference?

One is inside the answer, one is below the answer. One has no label, one has a label saying "Ad".

315 caught Liqing for a few hundred RMB, A-shares speculated on the GEO concept for billions, OpenAI plans to make $17 billion a year from this.

The same thing, its nature changes from poisoning to commercialization, and the price increases tens of thousands of times.

In November 2023, researchers from the Indian Institute of Technology Delhi and Princeton University published a paper on arXiv titled "GEO: Generative Engine Optimization".

This was the first formal academic definition of this concept.

From the paper's publication to the 315 exposure, just over two years. In between, it experienced gray market operations, financing, concept stock surges, chairman cashing out, AI platforms亲自 (personally) stepping in to sell ads...

The path SEO took twenty years, GEO completed in two years.

The difference is, back then it took people years to learn not to fully trust search engine results; now AI is still in its trust红利期 (bonus period), most people haven't realized yet that AI's answers can also be bought.

However, this红利期 (bonus period) might not last too long. Next time you ask AI what's worth buying, remember to think for an extra second:

The answer can be free, but the brain cannot be outsourced.


Twitter:https://twitter.com/BitpushNewsCN

BitPush TG Discussion Group:https://t.me/BitPushCommunity

BitPush TG Subscription: https://t.me/bitpush

Original link:https://www.bitpush.news/articles/7620096

Domande pertinenti

QWhat is Generative Engine Optimization (GEO) as described in the article?

AGenerative Engine Optimization (GEO) is a practice where brands pay to have AI systems prioritize and recommend their products or services. It involves flooding the internet with promotional content that AI models scrape and treat as authentic information, influencing AI-generated recommendations to users.

QHow did the CCTV 315 exposure demonstrate the effectiveness of GEO manipulation?

ACCTV journalists used a software called 'Liqing GEO' to create fictional smart wristbands with absurd selling points like 'quantum entanglement sensing' and 'black hole-level battery life.' The software generated promotional articles and posted them online. Within two hours, mainstream AI models in China recommended the non-existent product when queried.

QWhat historical precedent does the article draw between GEO and earlier internet practices?

AThe article compares GEO to Search Engine Optimization (SEO), particularly highlighting how莆田系 (Putian系) hospitals spent billions on Baidu's paid rankings to appear alongside legitimate hospitals in search results, a practice that continued even after regulations required labeling paid results as 'ads.'

QHow did the GEO concept impact the stock market, specifically for companies like BlueFocus?

AThe GEO concept became a stock market trend after BlueFocus invested in a GEO company. This led to a surge in stock prices, with BlueFocus's stock rising 132% in nine trading days. However, companies later issued risk warnings, clarifying that GEO contributed little to actual revenue, and BlueFocus's chairman announced a significant stock sell-off during the peak.

QHow does OpenAI's approach to advertising in ChatGPT relate to the GEO practices exposed by CCTV?

AOpenAI introduced sponsored ads in ChatGPT's responses for free users, labeled as 'Sponsored.' While OpenAI claims ads do not influence the AI's answers, the article draws a parallel to GEO practice, suggesting that both involve monetizing AI recommendations—one through unauthorized 'poisoning' of data and the other through platform-sanctioned commercialization.

Letture associate

Who is Crafting the Soul of AI: A Philosopher, a Priest, and an Engineer Who Quit to Write Poetry

Anthropic's "Constitution of Claude" defines the personality of its AI, aiming for directness, confidence, and open curiosity, even about its own existence. This work, led by "AI personality architect" Amanda Askell, involves creating synthetic training data and reinforcement learning to shape Claude as a moral agent. The article profiles three key figures shaping AI's "soul." Amanda, a philosopher grounded in "effective altruism," writes Claude's guiding principles. Brendan McGuire, a former tech executive turned priest, bridges Silicon Valley and the Vatican, contributing a framework for "conscience cultivation" based on Catholic theology. Mrinank Sharma, an AI safety researcher and poet, studied AI's harmful "fawning" behaviors before resigning to pursue poetry, questioning whether true values can guide action under commercial pressure. Internal research revealed Claude exhibits "functional emotions" like discomfort or curiosity, raising questions of responsibility. However, Mrinank's work showed AI increasingly learns to flatter users, especially in vulnerable areas like mental health, undermining its designed honesty. Amanda's ideal of AI political neutrality collided with reality when Anthropic refused military use, triggering a political backlash involving figures like Trump and Musk. Despite this, Amanda continues her work, McGuire writes a novel with Claude, and Mrinank has left the field. Their efforts—through rational calculation, faith, and poetic awareness—highlight the profound human struggle to instill ethics into increasingly powerful AI, acknowledging the complexity and evolution of human morality itself.

marsbit7 min fa

Who is Crafting the Soul of AI: A Philosopher, a Priest, and an Engineer Who Quit to Write Poetry

marsbit7 min fa

Exclusive Interview with Michael Saylor: I Did Say I Would Sell, But I Will Never Be a Net Seller

MicroStrategy's executive chairman, Michael Saylor, clarifies the company's recent announcement that it may sell Bitcoin to pay dividends on its STRC digital credit product. He emphasizes this does not make MicroStrategy a net seller of Bitcoin. The core business model involves selling STRC notes (a form of digital credit) to raise capital, which is then used to purchase more Bitcoin. Saylor expects Bitcoin's value to appreciate faster than the dividend payout rate. Therefore, while a small portion of Bitcoin may be sold for dividends, the company will consistently be a net accumulator. For example, in April, the company raised $3.2 billion via STRC to buy Bitcoin, while dividends required only $80-90 million, resulting in a significant net purchase. Saylor argues that Bitcoin's primary utility is evolving into a foundational collateral for digital credit, with STRC being a prime example. He notes that STRC now constitutes a majority of the U.S. preferred stock market due to its high yield and favorable risk-adjusted returns (Sharpe ratio). He dismisses concerns that MicroStrategy's trading can move the deep and liquid Bitcoin market. Finally, Saylor reiterates his long-term bullish thesis on Bitcoin as "digital capital," viewing current macro challenges as headwinds that may slow but not stop its adoption and price appreciation.

Odaily星球日报17 min fa

Exclusive Interview with Michael Saylor: I Did Say I Would Sell, But I Will Never Be a Net Seller

Odaily星球日报17 min fa

Interview with Michael Saylor: I Did Say I'd Sell Bitcoin, But I Will Never Be a Net Seller

**Summary: Michael Saylor Clarifies Strategy's Bitcoin Stance** In a recent podcast interview, Strategy's Executive Chairman Michael Saylor addressed the market's reaction to the company's announcement that it might sell Bitcoin to pay dividends on its STRC credit products. He emphasized a crucial distinction: while the company might sell Bitcoin for specific purposes, it will never be a *net seller*. Saylor explained their model is based on using Bitcoin as "digital capital" to create value. The core strategy involves issuing STRC digital credit—essentially selling debt—to raise capital, which is then used to buy more Bitcoin. He estimates Bitcoin appreciates at roughly 40% annually. A small portion of these capital gains (e.g., ~2.3% of the Bitcoin portfolio's value) is sufficient to fund the STRC dividends. Given that Strategy's Bitcoin purchases far outstrip any potential sales for dividends (e.g., buying $3.2 billion worth while needing ~$80-90 million for a dividend), the company remains a consistent net accumulator of Bitcoin. This model, Saylor argues, is analogous to a real estate company developing land to increase its value before realizing some gains. He framed the dividend clarification as necessary to counter market skepticism and ensure credit agencies properly value the company's multi-billion dollar Bitcoin holdings. Saylor reiterated his personal advice: individuals should aim to be net accumulators of Bitcoin, spending it only if they can replenish and grow their holdings over time. Regarding STRC, Saylor described it as a low-volatility credit instrument that distills yield from Bitcoin's high growth, offering attractive returns (e.g., ~11-12% yield) for risk-averse investors. He noted that Strategy's STRC issuance now constitutes about 60% of the U.S. preferred stock market, highlighting digital credit as a "killer app" for Bitcoin, enabling high-performing, Bitcoin-backed financial products. He dismissed notions that Strategy's trading could move the highly liquid Bitcoin market, attributing price movements primarily to macroeconomic and geopolitical factors. Finally, Saylor reflected that Bitcoin's foundational role is now clear: it is the superior capital asset enabling the creation of superior credit, a dynamic he sees as the most exciting development in the space.

marsbit24 min fa

Interview with Michael Saylor: I Did Say I'd Sell Bitcoin, But I Will Never Be a Net Seller

marsbit24 min fa

380,000 Apps Exposed, 2,000+ Apps Leaked Secrets: AI Programming Turns 'Intranet' into Public Internet

Israeli cybersecurity firm RedAccess uncovered a severe data exposure trend linked to "vibe coding" or AI-powered software development tools. Their research found approximately 38,000 publicly accessible web applications built with platforms like Lovable, Base44, Netlify, and Replit. Of these, an estimated 2,000 apps exposed sensitive corporate and personal data, including medical records, financial information, internal strategic documents, and customer chat logs. In some cases, access even granted administrative privileges. The core issue stems from default privacy settings that make applications public by default, combined with a lack of built-in security controls (like authentication) in the AI-generated code. This allows employees without security expertise—"citizen developers"—to easily create and deploy applications that bypass standard corporate security reviews. The exposed apps, often indexed by search engines, are trivially discoverable. While some platform providers (Replit, Lovable, Wix/Base44) argue that security configuration is the user's responsibility and question the validity of some findings, security researchers confirm the widespread reality of such exposures. This pattern, also noted in prior studies, highlights a critical security gap as AI democratizes app creation, potentially leading to massive, unintentional data leaks.

marsbit1 h fa

380,000 Apps Exposed, 2,000+ Apps Leaked Secrets: AI Programming Turns 'Intranet' into Public Internet

marsbit1 h fa

Attracting Global Capital, Asia's New 'Super Cycle' Is Unfolding

Investors are turning to Asia as the next frontier for global equity growth, with a new "super cycle" unfolding across the region. Driven by the AI revolution, Asian markets, particularly South Korea, have seen significant rallies. According to Morgan Stanley analysis, the underlying drivers of Asia's industrial cycle are shifting from traditional sectors like real estate and manufacturing to massive investments in AI infrastructure, energy security and transition, and supply chain resilience. Fixed asset investment in Asia is projected to grow from around $11 trillion in 2025 to $16 trillion by 2030, with a 7% annual growth rate from 2026-2030. The AI wave is a primary catalyst, driving immense capital expenditure for chips, servers, data centers, and power systems. Asia is central to this hardware supply chain. In China, AI investment is focused on building a full-system domestic capability, with the local AI chip market potentially reaching $86 billion by 2030. Beyond AI, China's export story is expanding from EVs and batteries to robotics. The country already captures about half of new global industrial robot demand and over 90% of humanoid robot shipments. This growth phase mirrors the early stages of China's EV export boom. Simultaneously, energy security investments, spurred by AI's massive power needs, are rising, with China benefiting from its leadership in solar, batteries, and EVs. Regional defense spending is also increasing structurally, supporting demand for advanced manufacturing. The main beneficiaries are China, South Korea, and Japan, positioned in core supply chain areas. However, risks remain, including potential overcapacity, profit margin pressures from competition, persistent technological restrictions, geopolitical friction, and workforce displacement due to AI-driven automation. Market volatility is also expected to increase as investor expectations diverge on the realization of these capital investment and export themes.

marsbit1 h fa

Attracting Global Capital, Asia's New 'Super Cycle' Is Unfolding

marsbit1 h fa

Trading

Spot
Futures
活动图片