TA419, a China-aligned threat actor active since April 2025, executed credential phishing campaigns in July 2026 targeting AI policy experts in US and Japan-based think tanks, universities, defense contractors, and legal organizations. The campaign used impersonation of prominent economists and AI policymakers to send benign conversation starter emails themed around AI policy topics. When recipients responded, TA419 deployed complex multi-stage URL redirection chains culminating in adversary-in-the-middle credential phishing pages leveraging a customized Frameless Browser-in-the-Browser (BitB) tool. This activity aims to gather intelligence on US AI policy and regulatory developments amid ongoing strategic competition involving AI technologies and export controls.

The campaign enables TA419 to steal credentials from targeted AI policy experts, potentially granting unauthorized access to sensitive communications and information related to US AI policy and regulatory matters. This supports Chinese intelligence efforts to monitor and influence AI strategic competition. The use of advanced phishing techniques, including adversary-in-the-middle attacks with a Frameless Browser-in-the-Browser tool, increases the likelihood of successful credential compromise.

No official patch or fix applies as this is a phishing campaign rather than a software vulnerability. Organizations and individuals targeted should increase awareness of sophisticated phishing techniques, especially those involving multi-stage URL redirections and browser-in-the-browser attacks. Verification of email sender identities and cautious handling of unsolicited invitations related to AI policy topics are recommended. Use of multi-factor authentication (MFA) can help mitigate credential compromise impact. Monitor and block known malicious domains associated with this campaign as listed in the indicators.