UAT-11985: AI-assisted event lures delivering real-time Google AitM phishing
Cisco Talos exposes APT group UAT-11985 using AI-generated academic-event lures and real-time Google adversary-in-the-middle phishing against Taiwanese researchers – a playbook that could easily target European R&D institutions.
Summary written by editorial AI · Source link below
Cisco Talos identified an APT spear-phishing campaign against individuals affiliated with Taiwan research organizations. The operation leveraged legitimate public event themes and impersonated reputable academic and policy institutions.
Editorial Analysis
AI-enhanced spear-phishing paired with real-time credential-interception infrastructure represents a step change in social-engineering effectiveness that European research organisations should prepare for.
Mandate phishing-resistant authentication (FIDO2/passkeys) for staff engaging in international research collaboration and conference registration.
An APT is combining AI-generated lures with real-time credential theft against researchers – phishing-resistant MFA is the primary countermeasure.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at Cisco Talos in a new tab.
More from the Threat Intel Desk
- Hackers pull off $133 million French bank heist via service provider2d
- Fake security tools on GitHub push backdoors and infostealers3d
- The Good, the Bad and the Ugly in Cybersecurity - Week 45 (2026)3d
- CEO-spoofing scammers used AI to help steal more than $100 million, feds say3d
- Chainalysis says breach exposed credentials for all customers3d