# Proofpoint links TA419 phishing campaigns to US AI policy targets

_Published Sunday, October 4, 2026 at 4:06 AM EDT · Security, AI · Latest · Tier 2 — Notable_

![Proofpoint links TA419 phishing campaigns to US AI policy targets — Primary](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgR69JnEBkz8N6_Nd5K75adIWh8xVmxW8FB21gsKinx9HBzgXQSLWL5sYdKMe9d-cbTSrgc45ZtYhmvhLZJII1H-tPXKn4AiRvj4KrU8ayeZskmMCfiV-mUc2pz10MumKyXKH6ybJ2RsVj9ZZ67l-4u0Y2f5Dl3kX7PLEzCAqogMfHTSfD7gM7QypHi-yos/s1700-nu-rw-lo-l85-e365/china-ms.jpg)

Proofpoint has attributed credential phishing campaigns against U.S. AI experts at think tanks, universities and legal organizations to TA419, a group it describes as China-aligned and motivated by espionage. Its analysis describes impersonation of economists, policymakers and an Anthropic employee.

The attackers first send harmless invitations, then follow up with a link after the target responds. A fake OneDrive login page proxies the Microsoft sign-in process, capturing credentials and session cookies while allowing the login to succeed. Proofpoint says TA419 added custom tracking and automation to an open-source tool. It recommends phishing-resistant authentication such as passkeys.

## Sources

- [The Hacker News](https://thehackernews.com/2026/10/china-aligned-ta419-targets-us-ai.html)

---
Canonical: https://techandbusiness.org/newswire/ltly-eH2swbxMMD46hWPmv
Published: 2026-10-04T08:06:00.651Z
Story chronology: 2026-10-04T07:20:32.000Z
Retrieved: 2026-10-04T10:12:51.125Z
Publisher: Tech & Business (techandbusiness.org)