The CLAW Trap: How a Sophisticated Phishing Syndicate is Hunting Developers on GitHub

OX Security reports a targeted phishing campaign against the OpenClaw AI community in which attackers create fake GitHub repositories and mass-generate issues to tag and notify project contributors; victims are directed to a phishing site that requests wallet connections and permission grants, allowing attackers to immediately drain connected cryptocurrency wallets. GitHub removed many malicious accounts, and no confirmed thefts are reported in the disclosure, but users are warned not to grant wallet sovereignty to unverified domains.