Proofpoint linked China-nexus actor TA419 to credential-phishing campaigns aimed at U.S. AI policy experts, including people at think tanks. The attacker impersonated well-known AI policymakers and an Anthropic executive, using believable “advisory committee” and “research questions” emails to draw victims into Microsoft 365 credential theft via an adversary-in-the-middle phishing setup.
TA419, a China-nexus threat actor, ran credential-phishing campaigns aimed at U.S. AI policy experts, including staff at think tanks. The attacker impersonated recognized public figures, such as AI policymakers and economists, and in at least one case a senior-level executive at Anthropic. These impersonations were used to build credibility before the real attack began.
The lures started as routine, low-pressure professional outreach, such as an invitation to join an AI policy advisory committee or a request for information about military use of Anthropic's Claude models. Only after a target replied did the attacker move to the credential theft phase, using an adversary-in-the-middle technique powered by a browser-in-the-browser tool called Frameless BitB. This flow targeted Microsoft 365 and Entra ID logins through a first-party OfficeHome application, making the fake sign-in page appear more legitimate than a typical phishing link.
This campaign worked because it exploited normal professional behavior rather than obvious red flags. An invitation to a committee or a research question from someone claiming AI policy or industry credibility is the kind of message policy experts and researchers receive regularly. By delaying the credential-harvesting step until after a reply, the attacker avoided triggering suspicion at the initial contact stage, when most people are more alert.
The use of a browser-in-the-browser technique also made the fake Microsoft sign-in page harder to distinguish from a real one, since it can visually mimic a legitimate login window within the browser itself.
Individuals in AI policy, research, and think tank roles should treat unsolicited professional opportunity emails as higher risk and verify the sender through a separate, known-good communication channel before replying or clicking any link. Because credential theft in this campaign happened after engagement rather than at first contact, staying alert through the entire conversation, not just the initial email, is important.
Organizations can reduce the impact of stolen passwords by adopting phishing-resistant authentication methods, such as passkeys, instead of relying solely on passwords. Proofpoint noted it was not aware of confirmed successful compromises from this campaign, but could not rule out activity outside its visibility, underscoring the value of proactive verification habits over reactive detection alone.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
TA419 targeted U.S. AI policy experts, including think tank leadership, researchers, and policy analysts, often by impersonating well-known AI policymakers and an Anthropic executive.
After a target replied to a lure email, attackers used an adversary-in-the-middle technique with a browser-in-the-browser tool called Frameless BitB to harvest Microsoft 365 and Entra ID credentials through a first-party OfficeHome application.
The lures began as routine professional outreach, such as invitations to join an AI policy advisory committee or questions about military use of AI models, which built trust before the credential theft stage began.
Verify unsolicited professional outreach through a separate channel, watch for login prompts that appear after replying to an email, and adopt phishing-resistant authentication methods like passkeys.
You get an email: “Hello, I’m reaching out to request that you join an advisory committee on AI policy.” Looks legit, big-name sender, right? This is TA419, a China-linked group, impersonating AI policymakers and even an Anthropic executive. Once you reply, they send a Microsoft 365 link and launch an adversary-in-the-middle attack using a browser-in-the-browser tool called Frameless BitB. Here’s the trick: a fake Microsoft 365 login pops up inside the page. It looks like a normal sign-in, even shows 'OfficeHome', but it’s a BitB window, just a picture of a browser stealing your Entra ID credentials in the middle. If an invite or research request pushes you to a Microsoft sign-in that feels even slightly off, BitB popup, odd URL, 'OfficeHome' you didn’t start, stop and verify the person through a separate, known-good channel before you click anything.
A China-aligned group (TA419) targeted US AI policy experts by impersonating well-known AI and policy figures and sending friendly “collaboration” emails. If the target engaged, the attackers redirected them through multiple URLs to a fake Microsoft login pop-up designed to steal Microsoft 365…
A China-aligned espionage group (TA419) targeted U.S. AI policy experts by impersonating well-known public figures and sending credible policy-related invitations. After victims replied, the attackers sent shortened links that led to a fake OneDrive login designed to capture passwords, MFA codes,…
A China-aligned group (TA419) impersonated well-known U.S. figures to lure AI policy experts into a fake OneDrive/Microsoft 365 login that could steal session cookies even when MFA is enabled. Separately, two U.S. airmen were sentenced for a multi-year business email compromise scheme where they…
Researchers say a China-aligned group (TA419) impersonated well-known AI policy figures and an Anthropic executive to lure US AI policy experts into replying to emails about a fake advisory committee or Senate report. Once a target engaged, the attackers sent shortened links that led through a fake…
Proofpoint reports a China-aligned espionage group (TA419) targeted U.S. AI policy experts at think tanks, universities, and law firms using phishing emails that impersonated well-known officials and AI industry figures. The attackers tried to start a conversation first, then sent a shortened link…
A China-aligned group (tracked as TA419) impersonated real AI policy figures and sent benign-sounding outreach to people working on AI policy at US and Japanese organizations. Once targets replied, the attackers sent a shortened link that ultimately led to a fake OneDrive/Microsoft 365 login page…
