A new report on earlier campaigns
Proofpoint disclosed TA419 on October 1, describing a China-aligned espionage group targeting people at think tanks, universities and law firms. Its account includes July 2026 approaches to U.S. AI policy specialists and a February impersonation of an Anthropic employee. These are newly reported findings about earlier activity, rather than evidence that every campaign began this week. The attribution and assessment of intelligence objectives are Proofpoint’s.
The invitation comes before the trap
The researchers say initial messages sought a conversation without an immediately malicious link. After a recipient replied, subsequent messages led toward a counterfeit file-sharing experience and a proxy that captured Microsoft sign-in sessions. The report recommends origin-bound, phishing-resistant authentication, including passkeys, and independent verification of unexpected professional approaches. A successful-looking sign-in does not by itself establish that the route to it was trustworthy.
Analysis: protect the work that requires openness
Universities and advisory firms cannot simply stop communicating with unfamiliar experts. Their work depends on conferences, peer review, introductions and collaboration. Our assessment is that the useful control belongs at the transition from an ordinary conversation to an account-access request. A researcher should have a convenient way to verify an invitation before opening a shared document, without needing to decide alone whether a respected name has been impersonated. Departments can establish a known contact for invitation checks and offer help through their existing service desk. The process should cover assistants and project coordinators as well as the senior expert whose name appears on the invitation. An employee who reports a questionable exchange after replying has still provided a valuable opportunity to intervene.
Make the handoff to the security team usable
For MSPs supporting professional practices, a practical review starts with the client’s real collaboration workflow. Identify who receives outside research requests, where documents normally arrive and who can promptly examine a suspicious exchange. Preserve the original message and the sequence of replies; a forwarded fragment may leave the responder without the context that made the approach convincing. Training should include the moment someone feels flattered by an invitation, pressed by a deadline or reassured by a familiar institutional name. The measure of success is a verification process people actually use. Testing that process with staff is more informative than merely recording that an awareness presentation was completed.
Sources & further reading
Our practical suggestions are editorial guidance. Verify applicability against current source and vendor instructions.
