Chinese hackers target U.S. AI policy secrets via impersonation

Cybersecurity firm Proofpoint has identified a targeted cyberespionage campaign by a hacking group known as TA419, which is linked to China. The group has been attempting to steal passwords from individuals at American and Japanese think tanks, universities, law firms, and defense contractors since at least 2025.

The operation involves hackers impersonating prominent artificial intelligence and national security experts to gain access to sensitive information regarding U.S. AI policymaking. Specifically, fraudulent emails have appeared to originate from Lynne Parker, the former principal deputy director of the White House Office of Science and Technology Policy. These messages typically invite recipients to collaborate on AI-related projects, subsequently directing them to fraudulent websites designed to harvest login credentials.

One target, Alex Engler of the Penn Center on Media, Technology, and Democracy, reported receiving a fraudulent invitation from the impersonated Parker. Proofpoint noted that the campaign has targeted fewer than 10 individuals across various organizations, focusing on experts involved in national AI strategy, export controls, and AI regulation. The findings suggest the primary objective is intelligence gathering on Washington’s policymaking processes rather than the theft of specific technologies.