UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing

Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted individuals affiliated with Taiwan research organizations to direct victims to an adversary-in-the-middle (AitM) phishing framework designed to harvest their Google account credentials and multi-factor authentication (MFA) codes. The activity is being tracked by

The reported UAT-11985 campaign used likely AI-assisted spear-phishing content, fake event invitations, institutional impersonation, and an adversary-in-the-middle framework to capture Google credentials, MFA codes, and authenticated sessions from Taiwan research affiliates.[1] The primary security impact is unauthorized disclosure and account compromise rather than an attack on an AI system itself. RealGround analysis: organizations should assess identity-phishing resilience, session-token protections, and governance for AI-enabled social-engineering threats.