Threat Intelligence4 October 2026
TA419 Phishes US AI Policy Experts With Microsoft AitM Pages
Proofpoint attributes a series of credential-phishing campaigns against AI policy experts to TA419, a China-aligned espionage group. The lures impersonate trusted peers and use a browser-in-the-browser kit that proxies real Microsoft sign-ins.
ta419phishingadversary-in-the-middle
3 min readRead
Browser Extension Security16 August 2026
737 Fake Chrome VPN Extensions Funnel Traffic Through One Proxy
Socket researchers traced 737 free Chrome VPN and proxy extensions — many impersonating brands like NordVPN and ExpressVPN — back to a single operator intercepting browser traffic through one SOCKS5 proxy.
chrome-extensionsvpn-securitybrowser-security
4 min readRead