UAT-11985 APT Campaign Targets Taiwan Research Affiliates with Google AitM Phishing

Cybersecurity researchers identified an APT spear-phishing campaign targeting Taiwan research affiliates through fake event invites. The attack uses an adversary-in-the-middle (AitM) framework to steal Google account credentials and multi-factor authentication codes.

Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted individuals affiliated with Taiwan research organizations to direct victims to an adversary-in-the-middle (AitM) phishing framework designed to harvest their Google account credentials and multi-factor authentication (MFA) codes.

The activity is being tracked by

Read original article