UAT-11985 Hits Taiwan Researchers With Google AitM Phishing — SkimNews
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- UAT-11985 is conducting an advanced persistent threat (APT) spear-phishing campaign that uses fake event invitations to target individuals affiliated with Taiwan research organizations.
- The campaign redirects targets through an adversary-in-the-middle (AitM) phishing framework designed specifically to harvest victims' Google account credentials.
- Cybersecurity researchers disclosed the operation's technical details, classifying it as a credential-theft effort aimed at a narrow set of academic and research-sector targets.
Why it matters: Google accounts tied to Taiwan research affiliates likely gate access to institutional email, shared documents, and collaboration tools — one stolen credential can cascade into far broader institutional exposure. The fake-event-invite lure exploits professionals conditioned to accept calendar invitations without scrutiny.
Ask SkimNews
