What happened
According to a report from Silicon Valley cybersecurity firm Proofpoint, a hacking group dubbed "TA419" and described as China-aligned impersonated AI industry professionals and even a former White House staffer.
The targets were AI policy experts at US think tanks, universities, and law firms.
The method: fake invitations, real malware
The attackers first sent benign-sounding intro emails, inviting experts to join a made-up "AI Policy Advisory Committee" or to contribute to a fictional Senate Committee on Foreign Relations report.
After a few email exchanges, the group sent malware-laced documents designed to gain access to the targets' cloud accounts. According to Proofpoint, one email impersonating a senior Anthropic staffer used the subject line "Request for Feedback on Military Integration of Claude."
Who was impersonated
Proofpoint researcher Mark Kelly told CNN that the group is a "Chinese government-aligned threat actor," citing targeting consistent with Chinese government interests, observed infrastructure and technical artifacts, and corroboration from industry partners.
Among those impersonated was Lynne Edwards Parker, who served as Principal Deputy Director of the White House Office of Science and Technology Policy under Joe Biden. Parker told CNN she was concerned for colleagues and felt sadness that relationships built over her career were being exploited by bad actors to deceive others.
Why it matters
Proofpoint said TA419 will likely continue targeting think tanks and policy experts working on technologies and in geographies of particular interest to the Chinese government, and will likely keep spoofing the identities of real subject-matter experts.
