n8n Webhooks Abused Since October 2025 to Deliver Malware via Phishing Emails

n8n workflow automation platform has been abused by threat actors since October 2025 to deliver malware and conduct phishing campaigns.

• •Attackers weaponize n8n webhooks to send automated phishing emails at scale
• •Malicious payloads and device fingerprinting capabilities delivered through trusted infrastructure
• •Traditional email security filters are bypassed by leveraging n8n's legitimate reputation
• •Sophisticated phishing campaigns facilitate credential theft and payload distribution

This summary was automatically generated by AI based on the original article and may not be fully accurate.