China aligned TA419 group targets US AI policy experts in phishing campaign

A China-nexus cyber espionage group named TA419 has targeted artificial intelligence policy experts working at United States think tanks, universities, and legal sector organizations with credential phishing campaigns, The Hacker News and gbhackers.com reported. [1][2]

The Hacker News reported that the group uses reply-triggered adversary-in-the-middle phishing attacks to steal Microsoft credentials and session cookies. The campaigns have impersonated prominent economists, AI policymakers, and an employee of Anthropic to focus on an AI policy expert at a U.S. think tank in February 2026. [1]

According to The Hacker News, one phishing email used the subject line Request for Feedback on Military Integration of Claude. Phishing is a social engineering technique where attackers deceive individuals into giving away sensitive information or relaying authentication to capture credentials. [1][5]

Cyberwarfare in the People's Republic of China involves cyberattacks attributed to state organs and related advanced persistent threat groups. As FTMQ News reported earlier, another suspected China-linked group named Warlock was recently found exploiting Microsoft SharePoint vulnerabilities to deploy ransomware. [3][6]