The n8n n8mare: How threat actors are misusing AI workflow automation

Reported 15 Apr 2026 by otx · Severity: medium

Investigation reveals widespread abuse of n8n, an AI workflow automation platform, in sophisticated phishing campaigns from October 2025 through March 2026. Attackers exploit the platform's webhook functionality to deliver malware and fingerprint devices while bypassing security