UAT-11985: AI-assisted event lures delivering real-time Google AitM phishing

Cisco Talos identified a sophisticated spear-phishing campaign targeting Taiwan research institutions that used impersonated event invitations, AI-assisted templating, and modified event posters (quishing) to lure victims; the operation deployed an operator-driven adversary-in-the-middle phishing kit (UAT-11985) that mimics Google authentication and uses a hybrid HTTP/WebSocket architecture to capture credentials and bypass MFA, with localization evidence suggesting a Simplified Chinese primary developer.