Malware-laced OpenClaw installers get Bing AI search boost

Threat actors published fake OpenClaw installers on GitHub that were promoted via Bing AI search results; executing the installer dropped multiple malicious components (Vidar stealer, GhostSocks proxy, Rust loaders) using a custom packer and in-memory execution techniques, enabling credential theft and turning compromised hosts into residential proxies—GitHub removed the repositories after Huntress reported them and researchers provided IOCs and behavioral details.