The skills pay the bills.

Researchers describe a GachiLoader campaign that disguises malware as a legitimate OpenClaw AI “skill” for Polymarket betting; victims are social-engineered with polished Electron apps and fake installation guides, leading to fileless injection and deployment of the Rhadamanthys infostealer with a blockchain-based C2, highlighting AI skill ecosystems as a new phishing-style attack surface.