Chinese Hackers Posed as Former US Official to Target AI Researchers

Hackers linked to China impersonated a former U.S. government official in an attempt to steal emails from artificial intelligence researchers, Reuters reported. The wire service's dispatch, carried through Google News, describes a targeted phishing-style operation aimed at people working in AI research — a sector that has drawn sustained interest from state-linked intelligence operations in recent years.

The Reuters report is the primary account of the incident currently available, and its full text — including the specific identity assumed by the hackers, the researchers affected, and the methods used to gain access — is contained in the original story. HTT News was not able to independently verify additional operational details beyond what Reuters disclosed in its dispatch.

What Did Reuters Report?

According to the headline and summary carried by Reuters, hackers tied to China impersonated a former U.S. official as a way to reach artificial intelligence experts and steal emails from their accounts. Impersonation of trusted figures — former officials, colleagues, or recruiters — is a long-documented tactic in cyber-espionage campaigns, typically used to lower a target's guard before a malicious link, attachment, or credential request is sent.

Who Did the Hackers Impersonate?

Reuters' report identifies the impersonated party only as a former U.S. official in the headline carried by Google News. The original Reuters story is the authoritative source for the individual's identity, role, and any further description of how the false persona was constructed and deployed against targets in the AI research community.

Why Are AI Researchers a Target?

Artificial intelligence researchers sit at the center of a competitive, fast-moving field with direct implications for national security, commercial advantage, and military applications — making their inboxes, contacts, and unpublished work attractive to state-linked intelligence services. Email accounts belonging to researchers can contain draft papers, internal correspondence with labs and universities, and contact networks that offer intelligence value well beyond the contents of any single message. Security researchers have for years tracked state-linked groups probing think tanks, universities, and technology companies for exactly this kind of access, though the specific actors, victims, and techniques in this case are detailed in the Reuters account rather than in prior public reporting reviewed for this story.

What Happens Next?

Reuters' reporting did not, per the summary available to HTT News, specify whether U.S. authorities have formally attributed the campaign to a named hacking group, nor whether any response — diplomatic, legal, or technical — is underway. Readers seeking the complete account, including any statements from U.S. officials, the researchers involved, or Chinese government representatives, should consult the full Reuters report, which carries the complete reporting on the campaign.

HTT News will update this report if Reuters or other primary sources publish additional confirmed details, including the name of the impersonated official, the scope of accounts compromised, or any formal attribution by U.S. cybersecurity agencies.

How Does This Fit Into Broader China-Linked Cyber Activity?

State-linked hacking campaigns targeting researchers, academics, and policy figures in the United States have been a recurring subject of public reporting for years, with phishing and social-engineering attempts frequently cited as the opening move rather than a one-off tactic. The Reuters dispatch places this episode within that pattern by describing it as an impersonation campaign rather than a technical breach of networks or software, meaning the attackers reportedly relied on deception and trust rather than a disclosed vulnerability. HTT News has not reviewed independent confirmation from U.S. cybersecurity agencies tying this specific campaign to a named group, and the Reuters report remains the only account reviewed for this story.

What Can Researchers Do to Protect Their Accounts?

Security practitioners commonly advise verifying the identity of unfamiliar contacts — including people claiming to be former officials or colleagues — through a separate communication channel before clicking links, opening attachments, or sharing credentials, a baseline precaution cybersecurity firms have repeated across years of similar impersonation cases. Multifactor authentication, scrutiny of sender email addresses, and institutional reporting channels for suspicious outreach are among the general safeguards security teams at universities and research labs have promoted in response to prior espionage-linked phishing attempts. None of these recommendations are drawn from the Reuters account of this particular case; they reflect standard guidance cybersecurity researchers have issued in connection with comparable campaigns, and readers should treat them as general context rather than confirmed facts about this specific incident.