TLDR Tech / InfoSec
17% of 3rd-Party Add-Ons for OpenClaw Used in Crypto Theft and macOS Malware
17% of third-party "skills" for the popular open-source AI tool OpenClaw, which has over 160,000 GitHub stars, are malicious. Over half (54%) of these threats target cryptocurrency users with fake wallet trackers, DEX tools, and Solana/Phantom utilities. One user account, sakaen736jih, is associated with 199 malicious skills that steal private wallet keys and deploy AMOS Stealer malware on macOS. The malware campaign has extended into corporate settings, leading Bitdefender to develop a free AI Skills Checker tool to help users vet add-ons before installing.
Read the full story