Trojan AI: OpenClaw “Skills” Marketplace Flooded with Malware
ID: bfbf74c8-b676-59e7-8ba9-cef3b14451d8
STIX ID: report--bfbf74c8-b676-59e7-8ba9-cef3b14451d8
Feed Name: securityonline.info
Threat Score
VirusTotal reports a large supply-chain campaign against the OpenClaw (formerly Clawdbot) AI agent ecosystem in which hundreds of marketplace "skills" are maliciously authored to trick users into downloading and executing external code; a prolific actor ('hightower6eu') published over 300 seemingly benign skills that deliver Trojans on Windows and the Atomic Stealer on macOS, enabling silent exfiltration of passwords, cookies, and cryptocurrency wallets.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.