UAT-11985 Phishes Taiwan Researchers via Google AitM — SkimNews
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- UAT-11985 is conducting a spear-phishing campaign that uses fake event invites to target individuals affiliated with Taiwan research organizations with an AitM phishing framework aimed at harvesting Google account credentials.
- Cybersecurity researchers have disclosed the operation as an advanced persistent threat (APT), highlighting the AitM technique that intercepts traffic between victims and Google's authentication flow.
Why it matters: The Google account credentials of Taiwan-affiliated researchers are the explicit target, making successful intrusions valuable for accessing Google's suite of work tools. The AitM framework's design to bypass standard phishing protections marks a technical step above typical credential harvesting.
Ask SkimNews
