China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing
China-nexus group TA419 runs adversary-in-the-middle phishing against US AI policy researchers, bypassing MFA—a technique likely to extend to European regulatory stakeholders as the EU AI Act takes effect.
Summary written by editorial AI · Source link below
A new China-nexus cyber espionage group known as TA419 has been attributed to multiple credential phishing campaigns targeting artificial intelligence (AI) experts working for U.S. think tanks, universities, and legal sector organizations.
The campaigns have impersonated prominent economists and AI policymakers, as well as a prominent Anthropic employee, to single out an AI policy expert at a
Editorial Analysis
With the EU AI Act implementation underway, European AI policy and compliance professionals are plausible next targets for state-sponsored credential theft campaigns using session-hijacking techniques that defeat basic MFA.
Mandate phishing-resistant authentication (FIDO2/passkeys) for all staff involved in AI policy, regulatory, or legal advisory functions.
A Chinese espionage group is actively stealing credentials from AI policy experts—EU regulatory personnel are a logical next target as the AI Act rolls out.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at THN (Feedburner) in a new tab.
More from the Threat Intel Desk
- Hackers pull off $133 million French bank heist via service provider2d
- Fake security tools on GitHub push backdoors and infostealers3d
- The Good, the Bad and the Ugly in Cybersecurity - Week 45 (2026)3d
- CEO-spoofing scammers used AI to help steal more than $100 million, feds say3d
- Chainalysis says breach exposed credentials for all customers3d