UAT-11985 Campaign Targets Taiwan Research Affiliates with Google AitM Phishing

Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted individuals affiliated with Taiwan research organizations. The activity, tracked by security researchers, involves the use of fake event invites as bait to direct victims to an adversary-in-the-middle (AitM) phishing framework. The framework is designed specifically to harvest Google account credentials and multi-factor authentication (MFA) codes. The campaign, attributed to the APT group UAT-11985, was reported by The Hacker News on October 16, 2026. The use of AitM techniques allows attackers to intercept authentication data in real-time, bypassing traditional security controls. The exact victim count and specific attribution details remain under investigation and are pending confirmation. The campaign highlights the continued evolution of phishing tactics targeting research and academic sectors.