UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing

Cybersecurity researchers have revealed an advanced persistent threat campaign targeting individuals affiliated with Taiwan research organizations. The campaign uses spear-phishing tactics, including fake event invites, to direct victims to a phishing framework. This framework is designed to steal Google account credentials and multi-factor authentication codes. The attackers are using an adversary-in-the-middle approach to carry out the phishing attacks. The campaign is being tracked by researchers, who have identified it as UAT-11985.