Malware News • 3h
AI-Generated Lures and Quishing in a Google-Impersonating AitM Campaign Targeting Taiwan Research Sector
A China-linked APT group has launched a sophisticated, AI-assisted spearphishing campaign against Taiwanese research institutes and academic bodies. The operation utilizes AI-generated email lures and malicious QR codes (quishing) to drive victims to highly convincing, multi-locale Google login clones. By leveraging an Adversary-in-the-Middle (AitM) framework, attackers maintain a persistent WebSocket C2 channel to relay MFA challenges in real-time, enabling the theft of session tokens and bypassing multi-factor authentication. This campaign represents a significant escalation in autonomous, AI-driven cyber espionage targeting high-value intellectual property and policy research.