daily cyber × ai intelligence

← threat actors

threat actor

TA419

1 story · 1 in the wild · October 2, 2026 – October 2, 2026

evidence: 1 attempted

how they got in

  • phishing email 1 · Oct 2

sectors

  • defense 1 · Oct 2
  • education 1 · Oct 2
  • legal 1 · Oct 2

geography

  • china 1 · Oct 2
  • united states 1 · Oct 2

techniques

  • phishing 1 · Oct 2

attack phases seen

  • Credential access 1 · Oct 2
  • Initial access 1 · Oct 2

what we reported, newest first, grouped by story

October 2, 2026

  • Proofpoint exposed a previously unreported China-aligned actor targeting people who shape US AI policy. TA419 began with benign rapport-building emails impersonating former White House official Lynne Parker or economist Heidi Crebo-Rediker, using fake invitations to an “AI Policy Advisory Committee” or a Senate report on export controls. Respondents were subsequently sent through redirects to a OneDrive credential-phishing page. Targets included universities, think tanks, law firms, and defense-related organizations. Proofpoint · Oct 2 · attempted · via phishing email · Threat Activity & Supply Chain