TA419 Phishes U.S. AI Experts Using Claude Lure — SkimNews
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- TA419 impersonated a prominent Anthropic employee, economists, and AI policymakers in phishing campaigns that targeted an AI policy expert at a U.S. think tank in February 2026.
- One phishing email used the subject line "Request for Feedback on Military Integration of Claude," directly invoking Anthropic's AI model to bait AI policy targets.
- Around July 2026, the group impersonated a former member of the White House Office of Science and Technology Policy leadership team in further credential phishing campaigns against U.S. AI policy experts.
- The attack chain routes a shortened URL through a Cloudflare Turnstile check to a OneDrive adversary-in-the-middle page that employs "Frameless BitB," a browser-in-the-browser spoof that mimics a Microsoft login window without using an iframe.
- TA419 extended the open-source Frameless BitB tool with a bespoke telemetry and automation module that relays captured credentials to real Microsoft infrastructure, so victims see a successful sign-in with no indication their session cookies have been stolen.
- Proofpoint attributes the activity to a China-aligned espionage actor active since at least April 2025, with a consistent focus on U.S.- and Japan-based think tanks, defense contractors, universities, and law firms working on defense, national security, energy, and foreign policy.
- Proofpoint recommends phishing-resistant authentication such as passkeys, and urges targeted individuals to verify unsolicited subject-matter outreach before responding.
Why it matters: The "Military Integration of Claude" lure shows TA419 is specifically harvesting intelligence on U.S. AI regulatory and military-use policy amid export controls and model distillation disputes. Because the AitM proxy captures session cookies during a seemingly successful login, victims have no signal to detect compromise — making passkeys the only reliable defense for the think tank, university, and legal sector experts being targeted.
Ask SkimNews
