U.S. AI Chip Export Controls Shift as ByteDance Expands Access to Nvidia GPUs in Malaysia
The U.S. Commerce Department withdrew an early draft AI hardware export rule that would have tied access to advanced American accelerators to foreign investment in U.S. AI infrastructure, while officials said a broader replacement framework is still being developed. The abandoned proposal reportedly envisioned a tiered licensing model based on computing scale, with expedited approval for smaller shipments and tighter conditions for large AI cluster deployments, underscoring that Washington is still recalibrating how it will control the global distribution of high-end AI compute.
At the same time, ByteDance is moving ahead with access to a 36,000-GPU Nvidia Blackwell cluster in Malaysia through cloud operator Aolani Cloud, in a deal Nvidia said complies with current U.S. export controls. The planned deployment, reportedly worth about $2.5 billion and built from 500 NVL72 GB200 systems, highlights how Chinese firms may still obtain substantial overseas AI compute capacity through third-country infrastructure even as direct chip access remains restricted. A separate analysis of Huawei’s HarmonyOS and China’s broader AI ecosystem is not about this specific export-control development and should be excluded.

Get ahead of threats like this
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
How this story unfolded
4 events from the most recent confirmed update back to the earliest known activity.
U.S. Commerce Department withdraws draft AI export rule
The U.S. Commerce Department withdrew the controversial draft export rule for American AI accelerators that would have imposed conditions on foreign operators of large AI clusters, including possible mandatory investment in U.S. AI infrastructure. Its removal indicated the administration was still developing a new export-control framework.
ByteDance plans 36,000 Blackwell GPU cluster in Malaysia
ByteDance was reported to be planning access to a 36,000 Nvidia B200 Blackwell GPU cluster in Malaysia through Aolani Cloud, with hardware supplied via Aivres and valued at about $2.5 billion. Nvidia said it had no objection and that such cloud deployments outside controlled countries comply with current U.S. export controls.
Draft U.S. AI accelerator export rule appears on OIRA website
An early draft U.S. export rule for AI hardware appeared on the Office of Information and Regulatory Affairs website in late February under the 'AI Action Plan Implementation' initiative. The proposal outlined a tiered licensing regime and stricter conditions for very large foreign AI clusters.
Aolani begins leasing H100 AI servers in Malaysia to ByteDance
Malaysia-based Aolani Cloud reportedly started leasing Nvidia H100-based AI servers in Malaysia to ByteDance, establishing an ongoing relationship for AI infrastructure outside China.
Related entities
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Sources
3 references tracked. Mallory keeps watching after this page renders.
America’s AI chip rules keep changing - and the rest of the world is paying the price | Tom's Hardware
tomshardware.com
Open sourceUS gov't revokes controversial AI hardware export rule that would mandate investments from foreign companies - new export rules are still in the works, though | Tom's Hardware
tomshardware.com
Open sourceChina's ByteDance to access 36,000 Blackwell GPU cluster through Malaysia cloud operator - Nvidia confirms no objections, deal is in line with US export controls | Tom's Hardware
tomshardware.com
Open sourceSee the full picture, correlated to your attack surface.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.


