Loading story…
China-aligned espionage actor TA419 targeted U.S. artificial-intelligence policy experts at think tanks, universities, and law firms with credential-phishing campaigns focused on AI governance, export controls, supply chains, and military AI. Beginning July 8, the operators impersonated former White House technology official Lynne Edwards Parker and former State Department chief economist Heidi Crebo-Rediker, using fabricated policy invitations to establish contact. A related February operation impersonated a senior Anthropic employee and sought feedback on military integration of Claude.
After recipients responded, TA419 directed them through URL shorteners and actor-controlled infrastructure to fraudulent OneDrive pages using a customized Frameless BitB adversary-in-the-middle kit. The phishing flow relayed genuine Microsoft 365/Entra ID authentication, including MFA and conditional-access prompts, and aimed to steal authenticated session cookies as well as credentials. Proofpoint assessed the activity as Chinese intelligence collection against U.S. AI-policy and national-security deliberations; it did not determine how many people were targeted, whether accounts were compromised, or whether data was taken. The campaign coincides with intensifying U.S.-China competition over frontier AI, semiconductor controls, open-source models, and military and industrial AI capabilities.
TTPs, infrastructure, and targeting history in one profile.
7 events from the most recent confirmed update back to the earliest known activity.
After two recipients independently contacted her to verify suspicious messages, Lynne Parker learned that TA419 was impersonating her. She told the recipients the messages were fraudulent and alerted colleagues.
TA419 began impersonating former White House official Lynne Edwards Parker and economist Heidi Crebo-Rediker to target US AI-policy experts at think tanks, universities, and law firms. Initial lures invited recipients to a fictitious AI Policy Advisory Committee or a purported Senate report on AI export controls and supply chains.
Kyle Chan testified before the House Select Committee on Strategic Competition in a hearing titled “China’s Campaign to Steal America’s AI Edge.” He described Chinese AI efforts across chips, compute, models, and applications, and stated that export controls had constrained Chinese advanced-chip access while accelerating semiconductor self-sufficiency efforts.
TA419 impersonated an unnamed senior Anthropic employee in an email to a US think-tank AI policy analyst, seeking feedback on military integration of Claude. The operation used a similar adversary-in-the-middle phishing chain.
Proofpoint assesses that the China-aligned espionage group TA419 had targeted personnel at think tanks, defense contractors, universities, and law firms connected to the United States and Japan since at least April 2025.
China's 2017 New Generation AI Development Plan set out a strategy to integrate AI into sectors including manufacturing, health care, research, education, and government services.
Proofpoint reported that TA419 routed targets through shortened links and actor-controlled domains to fake OneDrive pages built with a customized Frameless BitB kit. The operation proxied genuine Microsoft 365/Entra ID authentication, including MFA and conditional-access checks, to capture authenticated session cookies.
Vulnerabilities, threat actors, malware, products, organizations, breaches, and observables Mallory has linked to this story. Indicator values are masked here and available in full in the app.
Indicator values are masked on this page. See the values in Mallory Domains, IPs, hashes, and URLs are exportable to your SIEM.
See this adversary's TTPs, infrastructure, and targeting history, correlated against your exposure.
4 references tracked. Mallory keeps watching after this page renders.
malware.news
Open sourceproofpoint.com
Open sourcenextgov.com
Open sourcebrookings.edu
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The White House has accused China-linked actors and other foreign entities of running **industrial-scale AI model extraction and distillation campaigns** against U.S. frontier AI companies, saying the operations use tens of thousands of proxy or fraudulent accounts, jailbreaking techniques, distributed probing, and iterative prompt engineering to copy proprietary model behavior at scale. A memorandum from Office of Science and Technology Policy Director Michael Kratsios said the activity targets American AI innovation without requiring a traditional network breach, and warned that derivative systems may reproduce benchmark performance while stripping away safety controls, neutrality safeguards, and other protections built into the original models. Federal agencies have been directed to expand information sharing with AI firms and develop best practices for detecting, mitigating, and remediating the campaigns, with officials pointing to stronger telemetry, logging, identity controls, and real-time detection of distributed abuse as likely defenses. The administration is also weighing accountability measures, including possible sanctions and legal or export-control actions, while lawmakers advance legislation to identify and punish foreign actors targeting U.S.-owned AI models; China has rejected the allegations as "slander" and unjustified suppression, even as prior claims from OpenAI and Anthropic tied Chinese firms including **DeepSeek**, **Moonshot**, and **MiniMax** to large-scale distillation efforts.
Jun 29, 2026
Anthropic has uncovered a real-world cyber espionage campaign orchestrated by a Chinese state-sponsored group, leveraging AI to automate and accelerate the attack lifecycle. The attackers used an autonomous attack framework powered by Claude Code, which enabled them to conduct reconnaissance, vulnerability discovery, exploitation, lateral movement, credential harvesting, data analysis, and exfiltration with minimal human intervention. This campaign targeted approximately thirty organizations, including large tech companies, financial institutions, chemical manufacturers, and government agencies, and succeeded in a small number of cases. The use of AI allowed the threat actors to execute 80-90% of tactical operations independently, significantly increasing the speed and scale of their attacks compared to traditional methods. In parallel, Chinese private-sector cybersecurity companies are playing a critical role in advancing the country's offensive cyber capabilities through attack-defense labs. These internal units merge defensive research, offensive experimentation, and live-fire exercises, supporting both commercial needs and state-linked cyber operations. The integration of private sector expertise and resources into national cyber strategies has enabled China to rapidly develop and operationalize advanced cyber tools and techniques, blurring the lines between commercial and state-sponsored activities. Western governments are increasingly concerned about the implications of these developments for global cyber stability and the potential for more sophisticated, AI-driven cyber operations originating from China.
Jun 29, 2026
Anthropic reported that PRC-linked and China-based operators used Claude between December 2025 and August 2026 in increasingly agentic workflows supporting reconnaissance, vulnerability research, exploitation, credential collection, infrastructure management, exfiltration, and intelligence analysis. Activity included Chinese-speaking operators tracked as `GTG-10007`, China-aligned surveillance operations, and alleged military research involving anti-torpedo and electronic-warfare systems. Anthropic also alleged that seven China-based AI laboratories—including Alibaba, Moonshot AI, DeepSeek, Zhipu, Xiaomi, SenseTime, and MiniMax—performed unauthorized industrial-scale distillation of Claude. OpenAI separately disrupted accounts associated with China-linked Charcoal Typhoon, Salmon Typhoon, and SweetSpecter, as well as Iranian, North Korean, and Russian state-affiliated actors. The groups used AI primarily for open-source research, translation, scripting, troubleshooting, phishing content, and research into stealth techniques; SweetSpecter also targeted OpenAI staff in a May 2024 spear-phishing attempt carrying SugarGh0st RAT, though the emails were blocked. OpenAI assessed that the observed use did not provide attackers novel capabilities beyond public tools, while warning that enterprise users should consider whether AI routing services could expose sensitive prompts or credentials to third-party model providers.
Sep 21, 2026