黑客冒用可信身份，瞄准AI专家的电子邮件账户

An invitation to collaborate on an artificial intelligence project became the starting point for a targeted phishing campaign against researchers and other specialists. According to findings published by cybersecurity company Proofpoint on October 1, attackers impersonated established professionals to approach their targets before directing them toward websites designed to steal account access. Proofpoint tracks the group as TA419 and assesses it as China-aligned. That attribution is the company’s assessment, based on technical infrastructure and observed activity. The immediate security issue is how the attackers combined professional credibility with deceptive sign-in pages. The published findings describe attempts to compromise accounts. They do not establish how many attempts succeeded or what information, if any, was taken. …