A Chinese hacking group attempted to steal emails and credentials of American and Japanese analysts, scientists, and government consultants working in the field of artificial intelligence.
A Chinese hacking group attempted to steal emails and credentials of American and Japanese analysts, scientists, and government consultants working in the field of artificial intelligence.
This was reported by cybersecurity company Proofpoint in its report.
The attackers, tracked by Proofpoint under the ID TA419, posed as prominent experts in artificial intelligence and government. Among the names used by the hackers was Lynn Parker, a former deputy director of the White House Office of Science and Technology Policy.
Hackers sent emails with proposals for collaboration, publications, or new initiatives in the field of AI policy on behalf of real, well-known experts.
During the correspondence, victims were asked to click on a link that led to phishing websites designed to steal passwords and access corporate email.
The operation targeted fewer than 10 senior officials and analysts from several key organizations involved in AI regulation, export controls, and the US national strategy for artificial intelligence.
Reuters journalists identified one of the targets of the attack as Alex Engler, a former White House official who heads the Pennsylvania Center for Media, Technology, and Democracy. He received a fake letter from “Lynn Parker” offering to join a new AI policy project, but he suspected something was wrong in time and, after checking with colleagues, exposed the impostor.
“The United States and China are in a state of fierce competition around AI. Trying to force people in the field of artificial intelligence policy to reveal their plans is a completely expected step in this fight,” Lynn Parker herself commented on the incident.
Proofpoint analysts attribute the attacks to the Chinese TA419 group based on the malware used, network infrastructure, and targets that fully align with Chinese intelligence priorities.
According to experts, the focus on a narrow circle of AI regulatory specialists indicates that Beijing hackers were primarily looking for information about the formation of US domestic and foreign policy, and not just seeking to steal source code or commercial technologies.
The Chinese embassy in Washington traditionally refrained from immediate comment. Beijing systematically denies its involvement in any cyber operations.
