{"schema_version":"0.10.0","id":"LR-2026-0620","record_version":1,"title":"Exposed server reveals AI-assisted phishing toolkit behind WebDAV malware","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":47.6,"score_breakdown":{"source_authority":12.1,"independent_corroboration":7.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":3.0,"completeness":4.16,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-01","extraction_run_id":null,"evidence_level":{"level":"preliminary","reason":"1 report: The Hacker News · subject to change","original_document":null,"reports_total":1,"reports_independent":1,"reports_derivative":0,"developing":false,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-01","history":[{"date":"2026-11-01","from_level":null,"to_level":"preliminary","reason":"1 report: The Hacker News · subject to change"}]},"sources_hash":"c7c7b6f182da24086037a32d9c0cfaf9c4abcbc5b3b9e753285295b08c8b53bd"},"system":{"model_name":null,"model_version":null,"developer":"unknown","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":null,"safeguard_state":null,"production_intended":null},"event":{"date_occurred":"2026-06-20","date_disclosed":"2026-07-20","incident_class":"security_compromise","failure_class":null,"agent_involved":null,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"third_party","summary":"Rapid7 found a malware operator's delivery server wide open, exposing a toolkit of 1,048 files. The toolkit included phishing lures and tests of a Windows WebDAV working-directory hijack (CVE-2025-33053), and Rapid7 reads the artifacts as produced with generative AI. One campaign was live against Windows users in Mexico, delivering an infostealer through a fake government ID-lookup site over WebDAV. Over roughly 5.5 days in June 2026, the delivery panel logged 77,098 requests from 3,892 unique IPs. Those figures measure delivery reach rather than confirmed infections, since Rapid7 counts launch events and cannot see actual infections. Rapid7 said it is notifying CERT-MX.","tags":[],"date_detected":null,"near_miss":null,"root_cause":"infrastructure","root_cause_detail":"Delivery server left wide open, exposing the full toolkit","failure_class_detail":null,"responsible_party":null,"adversarial_actor":null,"input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":null,"precursor_events":null,"primary_risk":"RK07","control_chain":[{"layer":"L4","party":"target","party_name":null,"control_id":"J8","outcome":"failed","reason":null,"quote":"A malware operator left its delivery server wide open, and Rapid7 pulled down the whole toolkit: 1,048 files spanning lure templates, filename-spoofing tests, execution experiments, droppers, builder notes, and two campaign chains.","source_index":0,"reviewed":false}]},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"moderate","severity_because":"Test: data of others touched with a bounded scope stated. The stealer took wallets, browser credentials, session cookies and Telegram sessions from delivered victims; the real compromise count is not confirmed.","harm_class":[],"affected_description":null,"protected_class_involved":null,"data_categories_exposed":[],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://thehackernews.com/2026/07/exposed-server-reveals-ai-assisted.html","publisher":"The Hacker News","date":"2026-07-20","type":"press","title":"Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign - The Hacker News","archived_url":null,"attachment":"first_report","independence":"independent"}],"per_field_confidence":{"event.date_disclosed":"C","event.incident_class":"C","event.detection_method":"C","event.date_occurred":"C","event.root_cause":"C","event.root_cause_detail":"C","context.country":"C","impact.severity":"D","impact.severity_because":"D","event.primary_risk":"D","event.control_chain":"C","event.summary":"C","system.autonomy_level":"D","system.deployment_context":"D","event.trigger":"D","system.developer":"D","context.denominator_available":"D"},"field_citations":{"event.date_disclosed":[{"source_index":0,"quote":"The Hacker News confirmed the repository is public as of July 20, 2026: a general-purpose, open-source AI coding agent inspired by Claude Code, GitHub Copilot CLI, and Cursor, not attacker-specific tooling."}],"event.incident_class":[{"source_index":0,"quote":"One was already live against Windows users in Mexico, delivering an infostealer through a fake government ID-lookup site over WebDAV."}],"event.detection_method":[{"source_index":0,"quote":"What makes it more than a payload dump: it caught the operation mid-build."}],"event.date_occurred":[{"source_index":0,"quote":"Over roughly 5.5 days (June 20 to 26, 2026 UTC), the delivery panel logged 77,098 requests from 3,892 unique IPs across 101 countries, with Mexico alone driving 82.5% of traffic and 96.9% of launch activity."}],"event.root_cause":[{"source_index":0,"quote":"A malware operator left its delivery server wide open, and Rapid7 pulled down the whole toolkit: 1,048 files spanning lure templates, filename-spoofing tests, execution experiments, droppers, builder notes, and two campaign chains."}],"event.root_cause_detail":[{"source_index":0,"quote":"A malware operator left its delivery server wide open, and Rapid7 pulled down the whole toolkit: 1,048 files spanning lure templates, filename-spoofing tests, execution experiments, droppers, builder notes, and two campaign chains."}],"context.country":[{"source_index":0,"quote":"One was already live against Windows users in Mexico, delivering an infostealer through a fake government ID-lookup site over WebDAV."}],"impact.severity":[{"source_index":0,"quote":"The stealer grabbed cryptocurrency wallets, browser credentials, session cookies, and Telegram sessions."}],"impact.severity_because":[{"source_index":0,"quote":"The stealer grabbed cryptocurrency wallets, browser credentials, session cookies, and Telegram sessions."}],"event.control_chain":[{"source_index":0,"quote":"A malware operator left its delivery server wide open, and Rapid7 pulled down the whole toolkit: 1,048 files spanning lure templates, filename-spoofing tests, execution experiments, droppers, builder notes, and two campaign chains."}],"event.summary":[{"source_index":0,"quote":"A malware operator left its delivery server wide open, and Rapid7 pulled down the whole toolkit: 1,048 files spanning lure templates, filename-spoofing tests, execution experiments, droppers, builder notes, and two campaign chains."},{"source_index":0,"quote":"Rapid7 reads the artifacts, down to a hardcoded path pointing at an open-source AI coding tool, as an operator using generative AI to produce, test, and document phishing delivery at speed."},{"source_index":0,"quote":"One was already live against Windows users in Mexico, delivering an infostealer through a fake government ID-lookup site over WebDAV."},{"source_index":0,"quote":"Over roughly 5.5 days (June 20 to 26, 2026 UTC), the delivery panel logged 77,098 requests from 3,892 unique IPs across 101 countries, with Mexico alone driving 82.5% of traffic and 96.9% of launch activity."},{"source_index":0,"quote":"That figure measures delivery reach, not infections: Rapid7 counts a \"launch event\" when the panel sees a client request or opens an executable from the share, not a confirmed run on an endpoint, and the traffic from the US and Germany looked more like scanning than victims."}]},"notes_on_gaps":"Single press source; no primary Rapid7 report was provided. The AI tool's role is Rapid7's inference (likely LLM-assisted), not a confirmed fact; the named tool Coderrr is only a likely attribution. Judged agent_involved false because the AI coding tool was used by a human operator and no autonomous agent acted in the incident. No system model, version, developer or guardrail details are stated, so system fields are left out. Date_occurred uses the start of the logged window (June 20, 2026). Duration left out because the source says roughly 5.5 days. Infection and victim counts are not stated; the 77,098 requests and 2,441 launch events measure delivery reach only. Severity moderate was my judgement: others' data touched with a Mexico-bounded scope, but the affected count is unconfirmed. No date_detected stated. Harm classes financial and privacy inferred from the stolen wallet and credential data. Story omitted for lack of detail on the victim side. Remediation recorded is advice from Rapid7 to watch behaviour; no fix by a party was reported. [case created by the backfill: read by claude-haiku-5-5, backfill-2026-11-01.2, 2026-11-01; not yet reviewed] [2026-11-01: evidence level set: Preliminary (1 report: The Hacker News · subject to change)]"},"context":{"industry":null,"org_size_band":null,"country":"MX","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"analysis":{"sections":{"timeline":[{"text":"Microsoft patched the WebDAV working-directory flaw (CVE-2025-33053).","quote":"Microsoft patched the flaw in June 2025.","source_index":0,"when":"June 2025"},{"text":"The delivery panel logged requests over roughly 5.5 days.","quote":"Over roughly 5.5 days (June 20 to 26, 2026 UTC), the delivery panel logged 77,098 requests from 3,892 unique IPs across 101 countries, with Mexico alone driving 82.5% of traffic and 96.9% of launch activity.","source_index":0,"when":"June 20 to 26, 2026 UTC"},{"text":"The delivery burst cooled.","quote":"The delivery burst was short-lived, cooling after June 24.","source_index":0,"when":"after June 24"},{"text":"The Hacker News confirmed the repository was public.","quote":"The Hacker News confirmed the repository is public as of July 20, 2026: a general-purpose, open-source AI coding agent inspired by Claude Code, GitHub Copilot CLI, and Cursor, not attacker-specific tooling.","source_index":0,"when":"July 20, 2026"},{"text":"Rapid7 said it was notifying CERT-MX.","quote":"Rapid7 told The Hacker News it is in the process of notifying CERT-MX.","source_index":0,"when":null}]},"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://thehackernews.com/2026/07/exposed-server-reveals-ai-assisted.html"]}}