Chinese Hackers Impersonate US Officials to Target AI Policy Experts in Sophisticated Phishing Attacks

Chinese Hackers Launch Targeted Phishing Campaigns Against US AI Policy Experts

A China-aligned cyber espionage group known as TA419 has been conducting sophisticated phishing campaigns targeting AI policy experts across US think tanks, universities, and law firms, according to cybersecurity firm Proofpoint1

1

2

2

. The Chinese hackers impersonated high-profile AI policy figures, including Lynne Parker, a former principal deputy director of the White House Office of Science and Technology Policy, and a senior Anthropic employee, to steal emails from AI experts working on critical policy issues3

3

. These credential theft schemes represent intelligence-gathering related to US AI policymaking during a period of intense geopolitical competition between the United States and China.

TA419's Sophisticated Adversary-in-the-Middle Phishing Techniques

Proofpoint identified that TA419 has been orchestrating credential phishing campaigns against individuals working for US and Japan-based organizations since at least April 20252

2

. The bulk of these attacks occurred in July 2026, when the group impersonated multiple individuals to target U.S. AI policy experts1

1

. Beginning July 8, TA419 sent phishing emails spoofing Parker and economist Heidi Crebo-Rediker, inviting targets to join a fake AI policy advisory committee or contribute to a Senate foreign relations committee report on AI export controls and supply chains1

1

. The Chinese hackers employed adversary-in-the-middle phishing using a multi-stage attack chain that began with harmless invitations to establish trust before deploying malicious links2

2

.

Technical Infrastructure Behind the Credential Theft Schemes

The phishing chain targets Microsoft 365/Entra ID through the first-party OfficeHome application, utilizing an open-source tool called Frameless BitB1

1

. This Browser-in-the-Browser attack creates a fake browser window within a legitimate session using HTML, CSS, and JavaScript, spoofing trusted login pages without using iframe elements2

2

. TA419 extended this open-source tool with custom telemetry and automation modules that track the victim's Microsoft sign-in flow and capture credentials using an AitM proxy powered by Evilginx2

2

. The July 2026 campaigns used driftshare[.]co as the first-stage domain and globalfileshareplatform[.]com as the second-stage domain, typically hiding backend hosting IP addresses through Cloudflare's content delivery network1

1

.

Targeting Patterns Reveal Focus on National AI Strategy

Proofpoint attributed the hacking efforts to China based on the types of malware used, internet infrastructure deployed, and targets selected, which align with Chinese intelligence collection priorities3

3

5

5

. The targeting involved fewer than 10 individuals working for a handful of think tanks, universities, and law firms, suggesting an intelligence interest in US policymaking rather than technology theft alone3

3

5

5

. Targets included experts working on AI regulation, export controls, and national AI strategy3

3

. Alex Engler, a former White House official who now heads the Penn Center on Media, Technology, and Democracy, confirmed receiving a suspicious email appearing to come from Parker inviting him to join a new AI policy project3

3

.

Anthropic Impersonation and Broader Cyber Espionage Context

In February 2026, the Chinese hackers spoofed a senior Anthropic employee to phish an AI policy analyst at a US think tank, using the subject line "Request for Feedback on Military Integration of Claude"1

1

4

4

. This occurred as US military officials pressured Anthropic to remove Claude's safeguards1

1

. Proofpoint's alert came one day after OpenAI accused China's Moonshot AI of stealing American models' reasoning and other data in distillation attacks that began on July 11

1

. Parker noted that the allegation of Chinese involvement made sense given the geopolitical competition: "The United States and China are in a competition around AI. Trying to get people in the AI policy space to reveal information about their AI policy plans—if that indeed was what the objective was—it's not surprising"5

5

.

Security Recommendations and Future Threat Outlook

TA419 has consistently shown interest in defense, national security, energy, international relations, and foreign policy targets, predominantly with a nexus to the US and Japan2

2

. The targeting of AI policy experts represents an extension of that focus rather than a departure from it2

2

. Proofpoint expects TA419 and other Beijing-aligned groups to continue targeting AI and other policy experts working on technologies of interest to the Chinese government1

1

4

4

. Organizations in the scope of TA419 activity should consider implementing phishing-resistant, origin-bound authentication such as passkeys1

1

. Individual targets should treat unsolicited subject-matter outreach with caution and verify authenticity before proceeding2

2

. The Chinese Embassy in Washington did not immediately respond to requests for comment, while Beijing has long denied carrying out cyberespionage operations3

3

.