The Phish That Passes MFA: China-Aligned TA419 Targets AI Policy Experts
Proofpoint says a China-aligned group posed as former White House staff and other AI policy figures to phish US experts. Its kit relays the genuine Microsoft sign-in, so the password and the MFA code both work. Proofpoint recommends phishing-resistant MFA such as passkeys. The first email asks for nothing. It invites an AI policy expert … Read more