NASA's Office of Inspector General revealed a sophisticated spear-phishing campaign where a Chinese national impersonated a U.S. researcher to target NASA employees and obtain sensitive information. The campaign also targeted government entities, universities, and private companies, focusing on U.S. defense software in violation of export control laws. The multi-year operation demonstrates advanced social engineering techniques and represents a significant national security concern given NASA's critical infrastructure role.