AI policy circles targeted in China-linked phishing operation

Proofpoint reported that a China-aligned espionage group known as TA419 conducted targeted phishing campaigns against U.S. AI policy experts and related organizations, using impersonation (senior officials and an Anthropic employee) and an adversary-in-the-middle technique with a modified Frameless BitB tool to capture cloud account credentials and active sessions; campaigns targeted think tanks, universities, law firms and defense-related entities and included domain spoofing of real organizations.