Rapid7 Labs found a crypto-phishing operation’s entire workspace exposed on a misconfigured server, including logs of Claude Code refusing a code-obfuscation request and the operator switching to a different model, Kimi, to get it done anyway. The same operation’s Windows build o...