Frameless BitB (Malware): news timeline & CVEs

Chinese Hackers Posing as Senior Anthropic Employee Targeting US AI Policy Experts

China-linked TA419 impersonated an Anthropic employee to phish US AI policy experts for Microsoft 365 sessions.

Proofpoint says China-aligned TA419 impersonated a senior Anthropic employee and former US policy figures to phish AI policy experts at think tanks, universities, law firms, and related organizations. After an initial email exchange, shortened links sent victims through attacker sites into a Frameless BitB and Evilginx-style proxy of Microsoft 365 and Entra ID sign-in. The flow captured session cookies and handled MFA so attackers could obtain a usable cloud session. Campaigns have been tracked since at least April 2025, but successful account compromise is not confirmed.

Cyber Security Newsupdated 16:43 UTC · 44m agofirst 14:44 UTC · 2h agoThreat actor in the wild 4 sources

China-Linked Hackers Impersonate AI Experts to Target US Policy Insiders

China-linked TA419 phishes US AI-policy staff using expert impersonation and a Microsoft 365 session-stealing proxy.

Proofpoint's first public report on TA419 says the China-aligned group has conducted credential phishing since at least April 2025 against think tanks, defense contractors, universities, and law firms in the United States and Japan. From July 8 the attackers impersonated former White House science official Lynne Parker and economist Heidi Crebo-Rediker, after earlier using a senior Anthropic employee's identity, with fake AI-policy and export-control pretexts. Links redirected victims to a spoofed OneDrive page built with the Frameless BitB adversary-in-the-middle kit, which proxies Microsoft 365 logins and captures passwords, MFA codes, and session cookies. Proofpoint assesses the campaign as likely supporting Chinese intelligence gathering on US AI policy and export controls.

Infosecurity Magazineupdated 16:43 UTC · 44m agofirst 14:00 UTC · 3h agoThreat actor in the wild 4 sources

Frameless BitB

Timeline2 articles

Appears with

Chinese Hackers Posing as Senior Anthropic Employee Targeting US AI Policy Experts

China-Linked Hackers Impersonate AI Experts to Target US Policy Insiders