Low-Code Webhooks Turn n8n Into a Malware Delivery Vector for Phishing
Threat actors are abusing exposed n8n webhooks to run phishing campaigns, delivering malware via CAPTCHA-triggered downloads and fingerprinting victims, enabling persistence through modified RMM tools and C2 communication.