A China-aligned hacking group used impersonation and credential-phishing techniques to target a small group of U.S. artificial-intelligence policy experts, according to new research from cybersecurity company Proofpoint.
Proofpoint tracks the group as TA419. Researchers said the attackers impersonated economists, AI specialists and a former U.S. government official to approach people working at think tanks, universities, law firms and other organizations involved in AI policy.
Campaign focused on policy intelligence
The malicious messages were designed to look like legitimate invitations to collaborate on AI-related topics. Victims who followed the links were directed to credential-stealing pages intended to capture passwords and email access.
Proofpoint said fewer than 10 people were targeted in the campaign it analyzed, suggesting a highly selective intelligence-gathering effort rather than a broad criminal operation.
AI policy itself becomes a cyber target
The researchers assessed that the activity was likely intended to collect information about U.S. AI regulation, export controls and strategic planning. Reuters reported that the campaign also involved targets connected to Japanese institutions.
China has repeatedly denied accusations of state-backed cyberespionage. Proofpoint’s attribution describes TA419 as China-aligned and is based on the company’s threat-intelligence analysis.
Sources: Proofpoint Threat Research; Reuters; public statements from targeted institutions.
