UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing

Researchers disclosed an APT spear-phishing campaign tracked as UAT-11985 targeting individuals affiliated with Taiwan research organizations. The attackers use fake event invites to direct victims to an adversary-in-the-middle phishing framework designed to harvest Google account credentials and multi-factor authentication codes, compromising accounts.