Chinese hackers posed as former US AI official to phish credentials from researchers
Chinese cyber actors masquerading as ex-US AI official Lynne Parker sent deceptive emails to steal passwords from AI experts, according to cybersecurity firm Proofpoint.
A cybersecurity firm identified a series of phishing attacks in which Chinese hackers impersonated former US official Lynne Parker to lure AI researchers into revealing their passwords. The group, dubbed TA419, sent emails that pretended to propose AI policy collaborations, then redirected recipients to credential-harvesting sites. Proofpoint says the campaign has been active since at least 2025 and focused on a small set of individuals working for US and Japanese think-tanks, defence contractors, universities and law firms.
One of the victims, Alex Engler, recognized the spoof after consulting colleagues. The attackers used malware and internet pathways consistent with Chinese intelligence collection priorities, leading Proofpoint to link the activity to Beijing. The Chinese Embassy in Washington did not respond to requests for comment, and China continues to deny involvement in cyber-espionage. Parker noted that the United States and China are locked in an AI competition, making such targeting unsurprising.
Why it matters
The scheme shows how state-linked hackers are targeting AI policy experts, raising concerns about the security of emerging technology research.
In this story
