UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing

Cisco Talos has disclosed an APT spear-phishing campaign, tracked as UAT-11985, targeting individuals affiliated with Taiwan research organizations with fake event invitations, The Hacker News reports. The lures direct victims to an adversary-in-the-middle phishing framework built to harvest Google account credentials and MFA codes, and the campaign also uses QR-code phishing.