Hackers Use GenAI to Build WebDAV Malware Lab Delivering PureRAT and Credential Stealers

Security researchers have uncovered an exposed WebDAV server operating as a malware testing and delivery lab, rather than a simple payload-hosting site. The infrastructure contained more than 1,000 files used to test phishing lures, shortcut abuse, Windows execution paths, and payload delivery chains leading to PureRAT and credential-stealing malware. The discovery began after MDR telemetry detected a user launching a file from a WebDAV location through rundll32.exe.…

Diamond Model