UAT-11985 Targets Taiwan Research Affiliates With Google AitM Phishing

The UAT-11985 APT group is running a spear-phishing campaign against staff at Taiwan research organizations. Victims are lured with fake event invites and redirected to an adversary-in-the-middle framework that steals Google credentials and MFA codes.

• Campaign targets employees of Taiwan research organizations
• Lure is fake event invitations
• AitM framework harvests Google passwords and MFA codes