Clawdbot’s rename to Moltbot sparks impersonation campaign

A coordinated impersonation campaign targeted the popular Moltbot (formerly Clawdbot) project by registering typosquat domains (moltbot.you, clawbot.ai, clawdbot.you), cloning the repository (github.com/gstarwd/clawbot), and publishing a polished fake site that misattributes authorship, misrepresents popularity metrics, and mixes legitimate and fraudulent links. Although the cloned code is currently clean, the infrastructure and SEO optimization indicate preparation for a supply‑chain attack where a later malicious update could harvest API keys, messaging tokens, conversation histories, and remote command access; Malwarebytes is blocking known IOCs.