China-Aligned TA419 Conducts AitM Phishing Against U.S. AI Policy Experts
Credential phishing campaigns impersonate economists, AI policymakers, and Anthropic staff to bypass multi-factor authentication.
Key Takeaways
- China-nexus threat actor TA419 (FamousSparrow) targeting U.S. AI policy experts and related sectors.
- Campaigns use Microsoft AitM phishing infrastructure to bypass multi-factor authentication.
- Threat actors impersonate economists, AI policymakers, and Anthropic employees as lures.
Related Security News
MetaMask Discloses Ongoing Infrastructure Security Incident
MetaMask, the popular cryptocurrency wallet developed by ConsenSys, has disclosed an ongoing security incident impacting its infrastructure. Details regarding the attack vector, specific systems compromised, and potential user impact remain limited in the initial report.
Microsoft's X Account Compromised in Crypto Pump-and-Dump Scheme
On October 2, 2026, unknown attackers gained control of the official Microsoft account on X (formerly Twitter), which has over 13 million followers. The account was used to post promotional content for a cryptocurrency token later identified as part of a pump-and-dump scheme. Microsoft and X platform representatives confirmed the compromise, which appears to have been achieved through account takeover rather than exploitation of a software vulnerability. No malware, zero-days, or CVEs are associated with this incident.
