China-Aligned TA419 Group Expands Targeting to U.S. AI Policy Experts
The China-aligned cyber espionage group known as TA419 has been observed conducting credential phishing campaigns specifically targeting artificial intelligence (AI) experts within U.S. think tanks, universities, and legal sector organizations. These sophisticated attacks aim to collect intelligence on the U.S. AI policy and regulatory landscape, underscoring ongoing strategic competition between the U.S. and China, according to The Hacker News.
Proofpoint, an enterprise security company, has described TA419 as an espionage-motivated threat actor active since at least April 2025. Historically, the group has focused its credential phishing efforts on individuals associated with U.S.- and Japan-based think tanks, defense contractors, universities, and law firms. The current targeting of AI policy experts represents a strategic expansion of their remit rather than a new direction, aligning with broader Chinese intelligence objectives.
Understanding TA419 AitM Phishing Tactics
The campaign observed in February 2026 involved impersonating prominent economists, AI policymakers, and even an Anthropic employee. Phishing emails, such as one with the subject line “Request for Feedback on Military Integration of Claude,” are designed to initiate trust. Once a target responds, the adversary deploys a shortened URL that triggers a multi-stage redirection chain. This chain ultimately leads to a Microsoft OneDrive adversary-in-the-middle (AitM) credential phishing page after passing a Cloudflare Turnstile check.
A key element of this campaign is the use of Frameless BitB, a variation of the browser-in-the-browser (BitB) attack technique. While traditional BitB attacks often embed a fake login page within an iframe, Frameless BitB achieves the same visual deception without using an HTML iframe element. As security researcher Wael Masri explained in January 2024, this method relies on injecting scripts and HTML alongside original content, using HTML/CSS/JavaScript tricks to create the visual effect of a legitimate login window. This advanced technique helps to bypass common phishing detections.
TA419 has further customized this open-source tool by integrating a bespoke telemetry and automation module. This module monitors the target’s Microsoft sign-in process, captures their credentials via the AitM proxy, and simultaneously relays these details to the actual Microsoft infrastructure. The critical advantage of this approach is that the victim successfully logs in without any visible anomalies, making the stealthy capture of session cookies virtually undetectable by the user. This advanced methodology for TA419 AitM phishing detection makes these attacks particularly insidious.
Mitigating Frameless BitB Attack Risks
Organizations and individuals must prioritize strong authentication methods to counter such sophisticated attacks. The primary recommendation is to enable phishing-resistant authentication methods, such as passkeys. These methods significantly reduce the effectiveness of credential phishing, as they do not rely on secrets that can be stolen via imposter websites.
Furthermore, individuals who are potential targets for TA419 activity, particularly those involved in sensitive AI policy discussions, should exercise extreme caution with unsolicited outreach, even if it appears to come from a known or reputable source. Verifying the authenticity of such communications through an independent channel—rather than replying directly to the email—is a crucial step to avoid compromise. Security teams should also focus on employee training regarding securing AI policy expert credentials and recognizing advanced phishing techniques like AitM and BitB variations.
Related: UNC6671 Rebrands: Multi-Brand Vishing and Cloud Extortion, Talos Q2 2026 Report: Phishing and Living-off-the-Land Trends