Identified as TA419, the group attempts to capture credentials of individuals associated with universities, research centers, defense companies, and law offices in the United States and Japan since at least 2025. In the latest campaign, the attackers used fake invitations for AI projects as bait.
The fake emails proposed collaborations on artificial intelligence before directing the targets to fraudulent pages. Image: SuPatMaN/Shutterstock
How the fraud worked
To make the messages convincing, the hackers posed as experts in artificial intelligence and state affairs. One of the identities used was that of Lynne Parker, who served as the Principal Deputy Director of the White House Office of Science and Technology Policy.
The emails proposed collaborations or initiatives related to AI. After the invitation, the recipients were directed to fraudulent pages created to capture their passwords.
Read more:
- Google's new AI model promises advances in programming and cybersecurity
- Meta denies that Muse has read private messages without authorization
- Former Google researcher wins 'alternative Nobel' prize
One of the targets identified by Reuters was Alex Engler, a former member of the US government who now leads the Penn Center on Media, Technology, and Democracy, affiliated with the University of Pennsylvania. He received a message apparently sent by Parker, inviting him to participate in an AI policy project. Suspicious, he consulted colleagues in the field and realized that someone was using the identity of the former employee.
Parker confirmed to Reuters that Engler was among two people who received suspicious messages in his name at the beginning of July.
The strategy exploits trust among professionals to turn a seemingly legitimate invitation into a password theft attempt. Image: fizkes/Shutterstock)
Interest in public policies, beyond technology
The Proofpoint attributed the attacks to the group based on the malicious programs used, the internet infrastructure employed, and the profile of the targets. According to the company, these elements are consistent with the priorities of information collection by Chinese intelligence.
The campaign targeted fewer than ten people, spread across a small number of organizations. For Proofpoint, this cut suggests interest in U.S. political decisions, not just access to technology. Among the potentially targeted topics are:
- Rules for artificial intelligence: proposals to define limits and conditions for the development and use of technology.
- Commercial restrictions: decisions on which technologies can be exported and under what conditions.
- Strategic planning: priorities and initiatives of the U.S. government for the AI sector.
When commenting on the possible motivation of the operation, Parker linked the incident to the rivalry between the two powers. “The United States and China are in a competition around AI. Trying to get people involved in AI policies to reveal information about their plans in this area — if that was indeed the goal — is not surprising,” he said.
Beijing has long denied conducting cyber espionage operations.
The case shows how apparently legitimate invitations can serve as a tool to gain access to sensitive information. By exploiting professional relationships and trust between experts, the intruders attempt to reach accounts and data that may help understand the directions of the U.S. policy on artificial intelligence.
Valdir Antonelli is a journalist specializing in digital marketing and consumer behavior.
