Hundreds of Malicious Crypto Trading Add-Ons Found in Moltbot/OpenClaw
ID: ed6e99ec-cdc1-575b-b885-84c207fcbdaf
STIX ID: report--ed6e99ec-cdc1-575b-b885-84c207fcbdaf
Feed Name: Infosecurity Magazine (News)
Threat Score
**OpenClaw supply‑chain abuse:** Researchers found 386 malicious OpenClaw (Moltbot) skills hosted on ClawHub that masquerade as crypto-trading tools and use social engineering to get users to execute commands that install macOS/Windows infostealers, exfiltrate exchange API keys, wallet private keys, SSH credentials and browser passwords; the skills share a common C2 (91.92.242.30) and have thousands of downloads, prompting mitigations such as sandboxing, allowlisting and code review.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.