A newly discovered hacking group known as UAT-11985 is currently targeting researchers and academics in Taiwan using convincing fake event invitations. These malicious emails look like harmless notices about upcoming conferences or webinars, but they are actually designed to steal login credentials. When victims click the links inside, they are directed to sophisticated phishing pages that can bypass standard security checks, capturing their Google account details and session cookies in real time.
This campaign highlights how cybercriminals are moving away from obvious scam messages and instead using professional-looking communications tailored to specific industries. Because these fake invites appear so legitimate at first glance, even careful professionals can struggle to tell them apart from real messages. Threat actors rely on the urgency of professional networking to trick people into lowering their guard and handing over sensitive access.
Staying safe from targeted phishing campaigns comes down to verifying unexpected messages and checking destination URLs before entering any passwords. If you receive an event invitation that feels slightly off, or if an email asks you to log into your account unexpectedly, you should never click directly inside the message. Instead, you can forward any suspicious email to scan@report.mailforensis.com to get an instant, plain-English threat analysis that tells you whether the message is safe before you take action.