China-aligned TA419 lured AI policy experts with fake advisory invitations in officials' names
Proofpoint says China-aligned TA419 posed as two former US officials and an Anthropic employee to phish AI policy experts' Microsoft accounts. Two recipients flagged the Parker emails by checking with her through another channel, a habit teams fielding advisory requests can adopt.
The Product Desk
What happened
- Starting July 8, the emails invited experts to a fictitious "AI Policy Advisory Committee" or to help with a purported Senate Foreign Relations Committee report on AI export controls.
- In February the group emailed a US think tank's AI policy analyst as a senior Anthropic employee, under the subject line "Request for Feedback on Military Integration of Claude."
- Proofpoint tied TA419 to China through its malware, the servers used in the attacks and its choice of targets.
- Anthropic and Crebo-Rediker did not respond to requests for comment, and Chinese officials have routinely denied allegations of state-backed hacking.
Why it matters
- What doesn't add up contradiction If TNW's account of malware-laced attachments holds, hardening Microsoft sign-in covers only one of two attack paths, while Nextgov's version of the report mentions only the credential page.
- Who's exposed exposure A compromised expert's inbox exposes the people they talk to as well: Nextgov notes access could reveal private discussions and contacts tied to AI's military use and sale abroad.
- What it limits constraint The people whose names are borrowed cannot see who received the fakes, so catching the campaign depends on recipients checking through a second channel.
- Who has to decide decision Whoever runs the Microsoft tenant has to choose which accounts to harden first, and this campaign points at staff publicly known for AI policy and export-control work.
Next story · Invest · 1h ago
Anthropic says Claude traced the P-256 seed to a Unix random number run in August 1997Confirmed2 publishers
On July 9, two people who had received email in Lynne Parker's name got in touch with her through separate channels to ask whether she had sent it [13]. She told them the messages were fraudulent and warned other colleagues [13]. The campaign under her name had started the day before, so the first alarm reached her within one day [18]. One of the two, according to Parker as reported by TNW, was Alex Engler, a former White House official who now runs the Penn Center on Media, Technology, and Democracy [15].
These recipients checked with Parker directly. In this campaign there was no link to inspect at first, because the attackers sent credential links only after a recipient had responded [2]. The attackers also borrowed the name of a former White House AI official. Parker's White House roles included assistant director for AI and founding director of the National AI Initiative Office [5].
The offer of a seat on a panel or a contribution to a Senate committee report was a lure for a sign-in on a fake OneDrive page, reached through follow-up correspondence once the target was talking [6]. Proofpoint's report says the group has long gone after defense and foreign policy targets tied to the US and Japan, and treats the AI policy work as more of the same: "The targeting of AI policy experts represents an extension of that remit rather than a departure from it" [12].
The two published accounts of Proofpoint's findings differ on details a defender needs. Nextgov reported that the report does not say how many people were targeted or whether any account was compromised [11]. TNW put the targets at fewer than ten individuals across several groups and said later messages carried malware-laced files as well as password lures [19] [10]. Nextgov describes only the Microsoft credential page [2].
By TNW's account the target list is short, and Proofpoint said that narrowness showed a concern with how the US develops policy [19]. "The challenge is that, without knowing who the bad actors are targeting, it's difficult to reach everyone who might be at risk," Parker said [14].
For a team whose people field outside advisory requests, I'd sort inbound mail on two axes. The first is whether the contact was solicited. The second is whether the next step asks for a sign-in or a file. Unsolicited mail that leads to a sign-in gets confirmed with the sender through a channel you already had, before anyone clicks, the way Parker's two contacts did it [13]. Unsolicited mail that asks only for a reply can get one, but in this campaign the reply is what brought the link [2], so the message after it is the one to distrust. Solicited contact that leads to a sign-in is ordinary work, and solicited contact with no sign-in is ordinary mail. The cost of the first cell is friction. Genuine invitations slow down, and the people whose names are worth borrowing end up fielding "did you send this?" messages, as Parker did [13].
What to watch
- Any confirmation from Proofpoint or the targeted institutions that a Microsoft account was actually compromised.
- New borrowed identities: Proofpoint expects TA419 to keep impersonating genuine experts, and says it has worked US and Japanese think tanks, defence firms, universities and law firms since at least 2025.
- Fuller technical detail from Proofpoint settling whether later messages carried malware-laced files or only credential lures.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+15
- Incentives
- Not scored
- Confidence62
Perspective Coverage
3 publishers- Builder
- Builder 20%
- Operator
- Operator 53%
- Investor
- Investor 27%
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
According to findings from Proofpoint released Thursday, Chinese hackers impersonated a former senior White House technology official, a former State Department economist and a senior Anthropic employee in attempts to break into the cloud accounts of AI policy experts.
- [2]
The campaigns targeted researchers at think tanks, universities and law firms using invitations to advise on AI policy and export controls; once recipients responded, the attackers sent links designed to steal their Microsoft login credentials.
- [3]
Proofpoint connected the activity to a group tracked as TA419, describing it as a China-aligned outfit supporting Beijing's intelligence interests.
- [4]
Beginning July 8, the hackers posed as Lynne Parker and then Crebo-Rediker in messages inviting AI experts to join a fictitious 'AI Policy Advisory Committee' or contribute to a purported Senate Foreign Relations Committee report on AI export controls and supply chains.
- [5]
Parker's White House roles included assistant director for AI and founding director of the National AI Initiative Office.
- [6]
After a recipient engaged with the initial messages, the attackers followed up with correspondence that directed targets to a fake OneDrive page used to attempt the account theft.
- [7]
In February the group impersonated a senior Anthropic employee in an email to an AI policy analyst at a US think tank, with the subject line 'Request for Feedback on Military Integration of Claude'; the research did not name the impersonated employee.
- [8]
Crebo-Rediker and Anthropic did not respond to requests for comment; Chinese officials have routinely denied allegations of state-backed hacking and espionage.
- [9]
Proofpoint linked the group to China through its malware, the servers used in the attacks and the targets it chose, which align with what Chinese spies typically look for.
- [10]
Later messages carried malware-laced files or tried to trick people into handing over their passwords, according to Proofpoint.
- [11]
The Proofpoint report does not say how many people were targeted, whether any accounts were successfully compromised or if the attackers obtained any information.
- [12]
The report says the hackers have 'consistently shown an interest in defense, national security, energy, international relations, and foreign policy targets, predominantly with a nexus to the U.S. and Japan' and that 'The targeting of AI policy experts represents an extension of that remit rather than a departure from it.'
- [13]
Parker told Nextgov/FCW she learned of the impersonation on July 9, when two recipients contacted her through separate channels to ask whether she had sent the emails; she told them the messages were fraudulent and alerted other colleagues.
- [14]
"The challenge is that, without knowing who the bad actors are targeting, it's difficult to reach everyone who might be at risk," Parker said.
- [15]
Reuters named one of the targets as Alex Engler, a former White House official who is currently in charge of the Penn Center on Media, Technology, and Democracy; according to Parker, Engler was one of two individuals to receive suspicious emails early on.
- [16]
Proofpoint said the group had been targeting US and Japanese think tanks, defence companies, universities and law firms since at least 2025 and expects it to continue impersonating genuine experts.
- [17]
Access to experts' accounts could expose private discussions and professional contacts relevant to decisions about AI's development, military use and sale abroad.
- [18]
Parker heard about the impersonation one day after the messages in her name began going out.
- [19]
Fewer than ten individuals in a number of groups were targeted; Proofpoint said this showed a concern with how the US develops policy rather than a desire to steal technology.
Sources
3 independent publishers whose own reporting we read for this story.
- mezha.netХакери, ймовірно пов’язані з Китаєм, видавали себе за посадовицю Білого дому та співробітника Anthropic
1 article · October 1, 2026
- nextgov.comChina-linked hackers posed as former US officials, Anthropic employee to target AI experts - Nextgov/FCW
1 article · September 30, 2026
- thenextweb.comSuspected Chinese hackers posed as US AI insiders, Proofpoint says
1 article · October 1, 2026
Topics and entities
Topics
- AI Policy
- State-sponsored phishing
Entities
- Heidi Crebo-Rediker
- Claude
- Proofpoint
- Anthropic