indicatorurl
hxxps://vmail[.]app[.]n8n[.]cloud/webhook/43976209-fb4f-47ce-9c4a-8ee44127dfa0
- First seen
- 2026-05-14
- Last seen
- 2026-05-14
- Sightings
- 1
Posts referencing this indicator
- Phishing-to-RMM Attacks: The Remote Access Blind Spot CISOs Can’t Ignore
Fake OneDrive phishing page hosted on legitimate n8n cloud infrastructure delivering ScreenConnect