Uat-11985 malicious activity

Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted individuals affiliated with Taiwan research organizations to direct victims to an adversary-in-the-middle (AitM) phishing framework designed to harvest their Google account credentials and multi-factor authentication (MFA) codes.

Published 16-Oct-2026 19:00 UTC · First seen 16-Oct-2026 16:45 UTC

Sources

• The Hacker News · 16-Oct-2026