Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
21 IOCs
Hallucinating Credibility: China-Aligned TA419 Impersonates its Way into US AI Policy Circles
Threat Actors
Excerpt
Key Findings In July 2026, a China-aligned threat actor Proofpoint tracks as TA419 conducted multiple credential phishing campaigns impersonating prominent economists and artificial intelligence (AI) policymakers to target AI experts working for US think tanks, universities, and legal sector organizations. TA419 also previously impersonated a prominent Anthropic employee to target an AI policy expert at a US think tank in February 2026. This activity likely supports wider…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(6)
Capability
Victim
Indicators of Compromise
Open the mindmap →21 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | heritiage.org | High | Score 58/100 | First seen |
| Domain | msfile.online | High | Score 58/100 | First seen |
| IP | 108.61.163.187 | High | Score 58/100 | First seen |
| Domain | quickfly.online | High | Score 58/100 | First seen |
| Domain | cloudsyncpulse.com | High | Score 58/100 | First seen |
| Domain | sharehub.space | High | Score 58/100 | First seen |
| Domain | goshshare.online | High | Score 58/100 | First seen |
| Domain | heritiages.org | High | Score 58/100 | First seen |
| Domain | publicsharefile.cloud | High | Score 58/100 | First seen |
| Domain | onecloudfilesync.com | High | Score 58/100 | First seen |
| Domain | tw-koryu.org | High | Score 58/100 | First seen |
| Domain | winsync.cloud | High | Score 58/100 | First seen |
| Domain | smartsyncbox.com | High | Score 58/100 | First seen |
| Domain | mypublicshare.com | High | Score 58/100 | First seen |
| Domain | synchvault.co | High | Score 58/100 | First seen |
| SHA256 | b314a1499cd728ca3e54b7150661fd0c7d2279065fe3f570f0f66c395d744460 | Medium | Score 53/100 | First seen |
| Domain | cirrushare.co | High | Score 58/100 | First seen |
| Domain | globalfileshareplatform.com | High | Score 58/100 | First seen |
| Domain | driftshare.co | High | Score 58/100 | First seen |
| Domain | fileswiftonline.cloud | High | Score 58/100 | First seen |
| Domain | shinjirou.info | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…