Hackers Weaponize OpenClaw AI Agents to Push Malware and Steal Crypto Wallets
Brief
Cybercriminals are turning AI agents into a new route for malware delivery. A campaign targeting OpenClaw, an open-source platform that lets AI agents interact with files, messaging apps, and terminal commands, used poisoned marketplace packages to place data-stealing malware on victim devices.
The campaign, known as ClawHavoc, targeted OpenClaw’s ClawHub skill registry with malicious packages disguised as useful developer, crypto, and automation tools.
Victims were lured into installing fake utilities or pasting commands into a terminal, allowing attackers to download malware that can steal crypto wallets, passwords, browser data, and developer credentials.
Researchers from Trellix identified the activity while tracking critical flaws and active exploitation affecting OpenClaw deployments.