Proofpoint links TA419 phishing campaigns to US AI policy targets
Image: Primary Proofpoint has attributed credential phishing campaigns against U.S. AI experts at think tanks, universities and legal organizations to TA419, a group it describes as China-aligned and motivated by espionage. Its analysis describes impersonation of economists, policymakers and an Anthropic employee.
The attackers first send harmless invitations, then follow up with a link after the target responds. A fake OneDrive login page proxies the Microsoft sign-in process, capturing credentials and session cookies while allowing the login to succeed. Proofpoint says TA419 added custom tracking and automation to an open-source tool. It recommends phishing-resistant authentication such as passkeys.
Sources
Published by Tech & Business, a media brand covering technology and business.
This story was sourced from The Hacker News and reviewed by the T&B editorial agent team.
Back to Newswire
