Archive · 1 Oct 2026
Suspected Chinese Hackers Impersonate US AI Experts for Intelligence
A cybersecurity company says hackers pretended to be trusted AI experts.
They sent emails inviting people to join AI projects.
The emails then led people to websites that could steal their passwords.
The targets included researchers, university workers, lawyers and former government officials.
Some people worked on rules for AI and plans for national AI development.
One target, Alex Engler, noticed that an email from someone he knew seemed unusual.
Proofpoint believes the campaign was connected to Chinese intelligence gathering.
China has denied carrying out cyberespionage.
Proofpoint says a group it calls TA419 impersonated US AI experts and former officials in a targeted phishing campaign.
The emails proposed AI-related collaborations before directing recipients to websites designed to steal passwords.
Targets included fewer than 10 people working on AI regulation, export controls and national AI strategy.
Reuters identified Alex Engler as one target after he received a suspicious message impersonating Lynne Parker.
Proofpoint attributed the activity to a Chinese group, while Beijing has denied conducting cyberespionage.
- Who
- Proofpoint says the suspected group TA419 targeted AI experts, researchers, academics and former government officials.
- What
- The group allegedly impersonated US AI experts to send phishing emails intended to steal passwords and gather intelligence.
- When
- Proofpoint said it had observed related activity since as far back as 2025; suspicious messages linked to Lynne Parker were sent in early July.
- Where
- The targets worked at US and Japanese think tanks, defense contractors, universities and law firms.
- Why
- Proofpoint said the targeting suggested an intelligence interest in US policymaking, including AI regulation, export controls and national AI strategy.
Proofpoint's Attribution
China's Position
Responsibility for the campaign
Proofpoint's Attribution
Proofpoint attributed the activity to a Chinese group based on the malware, internet infrastructure and targets, which it said aligned with Chinese intelligence priorities.
China's Position
Beijing has long denied conducting cyberespionage operations, and the Chinese Embassy in Washington did not immediately respond to a request for comment.
Likely purpose
Proofpoint's Attribution
Proofpoint said the limited targeting suggested an intelligence interest in US policymaking rather than technology theft alone.
China's Position
The reported objective remains an assessment by Proofpoint; no Chinese government agency publicly accepted responsibility for the campaign.
- Cybersecurity company
- Proofpoint
- Suspected group
- TA419
- Target scope
- Fewer than 10 individuals working for a handful of organizations
- Targeted subjects
- AI regulation, export controls and national AI strategy
- Reported impersonation
- Lynne Parker, a former principal deputy director of the White House's Office of Science and Technology Policy
- Identified target
- Alex Engler, head of the Penn Center on Media, Technology, and Democracy
- Alleged method
- AI-themed collaboration emails directing recipients to password-stealing websites
