Malicious OpenClaw Skills Used to Distribute Atomic macOS Stealer

TrendAI Research discovered a campaign distributing Atomic macOS Stealer (AMOS) via malicious OpenClaw agent skills that instruct AI agents or users to install a fake OpenClawCLI; the delivered Mach-O universal binary harvests credentials, keychains, browser data, crypto wallets, Telegram/Discord data and other files, compresses them, and uploads to a C2. The report includes infection-chain artifacts (Base64-encoded installer commands, C2 upload endpoints), binary analysis (multi-key XOR string encryption, master keys), detection evidence (VirusTotal detections, TrendAI blocking), recommended mitigations (use of MDR, containerized testing, hunting queries) and links to IOCs.