UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing

As cited

Copy frozen at 2026-10-16 20:13 UTC (site build).

threat intel

UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing

An advanced persistent threat (APT) group dubbed UAT-11985 deployed fake calendar invitations to lure researchers affiliated with Taiwan organizations into a credential harvesting attack. The phishing infrastructure captured Google account passwords and multifactor authentication (MFA) codes through an adversary-in-the-middle (AitM) framework.

Why it matters: Researchers and academic staff in Taiwan face targeted phishing attacks designed to compromise their Google accounts and bypass MFA; organizations should review email security controls and train staff on suspicious event invitations.

Source published

2026-10-16 16:16 UTC

First seen by Cybersecurity Tracker

2026-10-16 19:00 UTC