SUSPECTED CHINESE SPIES SPOOFED AN ANTHROPIC EXEC, EX-WHITE HOUSE OFFICIAL IN AI PHISHING

Summary from the TLDR InfoSec newsletter

Proofpoint linked TA419 to credential-phishing campaigns against US policy specialists. The group spoofed Lynne Edwards Parker, Heidi Crebo-Rediker, and an Anthropic employee. Emails offered committee roles or report work, then sent victims to Cloudflare-protected pages mimicking OneDrive. Evilginx-based Browser-in-the-Browser pages targeted Microsoft 365 credentials and session cookies.