UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing
Summary
APT group UAT-11985 is conducting a spear-phishing campaign targeting Taiwanese research affiliates. The campaign uses fake event invites to lure victims into an adversary-in-the-middle (AitM) phishing framework, aiming to steal Google account credentials and MFA codes.
IFF Assessment
FOE
This campaign represents a sophisticated attack by an APT group aiming to compromise sensitive accounts, which is detrimental to defenders.
Defender Context
Defenders should be aware of APT campaigns utilizing social engineering tactics like fake event invitations to distribute AitM phishing frameworks. It highlights the persistent threat to organizational credentials and the need for robust user awareness training on phishing and MFA interception risks.