Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign

Rapid7 discovered an exposed server containing an AI-assisted phishing toolkit with 1,048 files, including lure templates, droppers, and two campaign chains. One campaign was already live against Windows users in Mexico, delivering an infostealer through a fake government ID-lookup site over WebDAV. The toolkit's exposure revealed the operator's infrastructure and methods.