An APT campaign tracked as UAT-11985 is targeting researchers in Taiwan using fraudulent event invitations. The attackers employ an Adversary-in-the-Middle (AitM) phishing framework designed to harvest target Google account credentials and multi-factor authentication (MFA) tokens in real-time.

AitMphishingMFA bypassAPT
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →