UAT-11985: AI-assisted event lures delivering real-time Google AitM phishing

Summary

Cisco Talos identified an APT spear-phishing campaign against individuals affiliated with Taiwan research organizations. The actor impersonated Taiwan European Union Centre, NCCU Institute of International Relations and Taiwan Research Institute, using legitimate public event themes. The campaign also used an AitM framework that impersonated Google authentication pages to intercept credentials and MFA challenges in real time.

Related items

• MediumHackers abuse Google Ads, Bing redirects to push Claude ClickFix attacksSame vendor · BleepingComputer
• InfoGoogle is launching a one-stop Gemini agent for your work tasksSame vendor · The Verge (AI)
• MediumTop MCP security resources — October 2026Same vendor · Adversa AI Blog
• InfoThe Pentagon Hopes to Speed Up ‘Kill Chain’ AI Buys With 5-Minute VideosSame vendor · Wired (Security)
• InfoAnthropic Introduces 3-Tier Cyber Verification Program for AI AccessSame vendor · SecurityWeek