TA419

TA419 is a Chinese government-affiliated hacking group that targets energy, transportation, and critical infrastructure sectors across North America and Europe. The group is known for using custom malware and living-off-the-land techniques to maintain long-term access to victim networks without detection. Organizations in regulated industries need to monitor for TA419 activity because the group's focus on operational technology systems poses direct risks to safety, continuity, and compliance with sector-specific security requirements.

1 item

EnforcementUS2026-10-02

Chinese Espionage Group Spoofed Anthropic Exec to Steal AI Policy Credentials

Security researchers at Proofpoint have identified a China-aligned threat group, designated TA419, running credential phishing campaigns in 2026 against AI policy communities. The attackers impersonated a senior Anthropic employee and former White House science officials to target researchers at US universities, think tanks, and law firms. Victims were lured with fake AI policy committee invitations and tricked into surrendering their Microsoft 365 login credentials.

Anthropic China espionage credential phishing identity security AI policy targeting TA419 export controls