--- title: Suspected Chinese hackers posed as US AI insiders,... description: Security firm Proofpoint reported that a China-aligned hacking group, tracked as TA419, impersonated well-known American AI figures—including a senior... canonical: https://daily.dev/posts/suspected-chinese-hackers-posed-as-us-ai-insiders-proofpoint-says-tnup6o7jb twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Suspected Chinese hackers posed as US AI insiders, Proofpoint says | daily.dev og:description: Security firm Proofpoint reported that a China-aligned hacking group, tracked as TA419, impersonated well-known American AI figures—including a senior... og:url: https://daily.dev/posts/suspected-chinese-hackers-posed-as-us-ai-insiders-proofpoint-says-tnup6o7jb og:image: https://api.daily.dev/og/posts/tNup6O7jB.png og:image:alt: Suspected Chinese hackers posed as US AI insiders, Proofpoint says og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Suspected Chinese hackers posed as US AI insiders, Proofpoint says **[The Next Web](https://daily.dev/sources/tnw)** · 2 min read · 0 upvotes · 0 comments ## Summary Security firm Proofpoint reported that a China-aligned hacking group, tracked as TA419, impersonated well-known American AI figures—including a senior Anthropic employee and a former White House technology official—to target AI policy experts at think tanks, universities and law firms. The phishing emails, sent since at least 2025, sought feedback on AI military use or invited targets to join fake policy panels, later delivering malware or credential-phishing attempts. Fewer than ten individuals were targeted, suggesting an interest in US AI policy-making rather than technology theft. China has denied the hacking allegations. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### Who is TA419 and what group has Proofpoint linked them to? TA419 is a hacking group identified by Proofpoint and believed to be acting on behalf of China. The group has targeted people at think tanks, universities, and law firms involved in AI regulation, export controls, and national AI strategy since at least 2025, and has been linked to China through its malware, servers, and choice of targets. _Security teams tracking state-sponsored threat actors can follow emerging TA419 reporting on daily.dev._ ### How did Chinese-linked hackers impersonate Anthropic employees to target AI policy experts? Attackers posed as a senior Anthropic employee and emailed an AI policy analyst at a US think tank with a subject line asking for feedback on the military use of Claude. From July, the group also impersonated Lynne Parker, a former White House technology official, and Caroline Crebo-Rediker, a former State Department economist, inviting targets to join a fictitious AI policy panel or help with a Senate report on AI export controls. _Anyone evaluating phishing risks tied to AI vendor impersonation can track these disclosures on daily.dev._ ## Similar posts on daily.dev - [AI helps Chinese-speaking hackers speed up attacks on exposed servers](https://daily.dev/posts/ai-helps-chinese-speaking-hackers-speed-up-attacks-on-exposed-servers-os1x7amnl) · CSO Online · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#anthropic](https://daily.dev/tags/anthropic), [#phishing](https://daily.dev/tags/phishing), [#ai-governance](https://daily.dev/tags/ai-governance) [View this post on daily.dev](https://daily.dev/posts/suspected-chinese-hackers-posed-as-us-ai-insiders-proofpoint-says-tnup6o7jb) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Suspected Chinese hackers posed as US AI insiders, Proofpoint says","url":"https://daily.dev/posts/suspected-chinese-hackers-posed-as-us-ai-insiders-proofpoint-says-tnup6o7jb","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/suspected-chinese-hackers-posed-as-us-ai-insiders-proofpoint-says-tnup6o7jb"},"datePublished":"2026-10-01T10:30:02.717Z","dateModified":"2026-10-05T16:24:45.949Z","description":"Security firm Proofpoint reported that a China-aligned hacking group, tracked as TA419, impersonated well-known American AI figures—including a senior...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/bce402bb839f0e88a9a9e70972785e5e?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/bce402bb839f0e88a9a9e70972785e5e?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"The Next Web","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Next Web","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/tnw","url":"https://daily.dev/sources/tnw"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/suspected-chinese-hackers-posed-as-us-ai-insiders-proofpoint-says-tnup6o7jb","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,anthropic,phishing,ai-governance","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Next Web","item":"https://daily.dev/sources/tnw"},{"@type":"ListItem","position":3,"name":"Suspected Chinese hackers posed as US AI insiders, Proofpoint says"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/suspected-chinese-hackers-posed-as-us-ai-insiders-proofpoint-says-tnup6o7jb#faq","mainEntity":[{"@type":"Question","name":"Who is TA419 and what group has Proofpoint linked them to?","acceptedAnswer":{"@type":"Answer","text":"TA419 is a hacking group identified by Proofpoint and believed to be acting on behalf of China. The group has targeted people at think tanks, universities, and law firms involved in AI regulation, export controls, and national AI strategy since at least 2025, and has been linked to China through its malware, servers, and choice of targets. Security teams tracking state-sponsored threat actors can follow emerging TA419 reporting on daily.dev."}},{"@type":"Question","name":"How did Chinese-linked hackers impersonate Anthropic employees to target AI policy experts?","acceptedAnswer":{"@type":"Answer","text":"Attackers posed as a senior Anthropic employee and emailed an AI policy analyst at a US think tank with a subject line asking for feedback on the military use of Claude. From July, the group also impersonated Lynne Parker, a former White House technology official, and Caroline Crebo-Rediker, a former State Department economist, inviting targets to join a fictitious AI policy panel or help with a Senate report on AI export controls. Anyone evaluating phishing risks tied to AI vendor impersonation can track these disclosures on daily.dev."}}]} ```