Chinese Hackers Impersonate US Officials for AI Cyber Espionage

Proofpoint observed China-aligned APT TA419 targeting US AI policy experts via social-engineering-based phishing that impersonated policymakers, established credibility, then delivered multi-stage redirected links to a fake OneDrive AitM credential-phishing page (customized Frameless BitB) to capture credentials and authenticated sessions and bypass MFA; the activity appears aimed at cyber-espionage around US AI policy and researchers recommend verifying unsolicited outreach and adopting phishing-resistant, origin-bound authentication such as passkeys.