China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing

According to Proofpoint, China-aligned espionage group TA419 is targeting U.S. AI policy experts with phishing emails impersonating trusted researchers and policymakers. The attackers first build trust through seemingly harmless outreach, then send links to convincing fake Microsoft OneDrive sign-in pages. Using adversary-in-the-middle (AitM) techniques, they capture credentials and session cookies while allowing the victim’s login to appear successful. The activity reportedly supports intelligence gathering on U.S. AI policy; recommended defenses include phishing-resistant authentication, such as passkeys, and independently verifying unexpected invitations. For more, visit The Hacker News.