Hackers exploit OpenClaw popularity in phishing attacks
Cybercriminals have launched a phishing campaign targeting OpenClaw developers, using fake GitHub accounts and promises of crypto rewards. Victims are told they have won $5,000 in $CLAW tokens and are redirected to a spoofed website.
According to OX Security, attackers create fake repositories and tag dozens of developers in GitHub issues to make the scam appear more credible.
Scope of the attack
The link leads to a website that mimics the official OpenClaw platform and includes a wallet connection button — the point where funds are stolen.Technical analysis shows the malicious code is hidden in an obfuscated JavaScript file and communicates with a separate command-and-control server. Once a wallet is connected, transaction data and wallet addresses are sent to attackers, while a built-in function can erase traces of activity to hinder investigation.
The campaign appeared recently, with most fake accounts created and deleted within hours. No confirmed victims have been reported so far, but researchers warn the attack appears targeted, particularly at users who interacted with OpenClaw repositories on GitHub.
About the project
OpenClaw is an open-source autonomous AI agent (personal assistant) created by developer Peter Steinberger, founder of PSPDFKit. The project launched in November 2025, initially under the names Clawdbot and Moltbot before adopting its current branding.The agent runs locally on a computer or server (Mac, Windows, Linux), allowing users to keep data private without relying on external cloud services. It integrates with messaging platforms such as Telegram, WhatsApp, Discord, Slack and Signal, and can perform real-world tasks including managing emails, sending messages, working with files, searching the web and automating workflows.
OpenClaw uses large language models (Claude, GPT or local models), features persistent memory and can operate autonomously, making it a tool for personal automation rather than just a chatbot.
Its rapid rise — gaining hundreds of thousands of GitHub stars — has made it an attractive target for scammers. Additional attention from its links to OpenAI and the broader AI agent trend has further increased its visibility.
How to stay safe
Experts advise avoiding suspicious links, not connecting crypto wallets to unknown websites and treating any “airdrop” or reward offers with caution. Users who may have connected their wallets to suspicious sites should immediately revoke all permissions to minimize potential losses.Earlier, the U.S., U.K. and Canada launched a joint operation targeting crypto phishing schemes.
Latest Crypto News
-
Afghanistan
-
Albania
-
Algeria
-
Angola
-
Argentina
-
Armenia
-
Australia
-
Austria
-
Azerbaijan
-
Bahamas
-
Bahrain
-
Bangladesh
-
Belarus
-
Belgium
-
Bolivia
-
Botswana
-
Brazil
-
Brunei
-
Bulgaria
-
Cambodia
-
Cameroon
-
Canada
-
Chile
-
China
-
Colombia
-
Congo
-
Costa Rica
-
Cote d'Ivoire
-
Croatia
-
Cuba
-
Cyprus
-
Czechia
-
DR Congo
-
Denmark
-
Dominican Republic
-
Ecuador
-
Egypt
-
El Salvador
-
Estonia
-
Eswatini
-
Ethiopia
-
Finland
-
France
-
Georgia
-
Germany
-
Ghana
-
Greece
-
Haiti
-
Hong Kong
-
Hungary
-
India
-
Indonesia
-
Iran, Islamic republic
-
Iraq
-
Ireland
-
Israel
-
Italy
-
Jamaica
-
Japan
-
Jordan
-
Kazakhstan
-
Kenya
-
Korea
-
Kuwait
-
Kyrgyzstan
-
Laos
-
Latvia
-
Lebanon
-
Lesotho
-
Libya
-
Lithuania
-
Luxembourg
-
Madagascar
-
Malaysia
-
Malta
-
Mauritius
-
Mexico
-
Moldova
-
Mongolia
-
Montenegro
-
Morocco
-
Mozambique
-
Myanmar
-
Namibia
-
Nepal
-
Netherlands
-
New Zealand
-
Nigeria
-
North Macedonia
-
Norway
-
Oman
-
Pakistan
-
Palestine
-
Panama
-
Papua New Guinea
-
Paraguay
-
Peru
-
Philippines
-
Poland
-
Portugal
-
Puerto Rico
-
Qatar
-
Reunion
-
Romania
-
Rwanda
-
Saudi Arabia
-
Serbia
-
Singapore
-
Slovakia
-
Slovenia
-
Somalia
-
South Africa
-
Spain
-
Sri Lanka
-
Sweden
-
Switzerland
-
Syria
-
Taiwan
-
Tajikistan
-
Tanzania
-
Thailand
-
Trinidad and Tobago
-
Tunisia
-
Turkey
-
UAE
-
Uganda
-
Ukraine
-
United Kingdom
-
United States
-
Uruguay
-
Uzbekistan
-
Venezuela
-
Vietnam
-
Yemen
-
Zambia
-
Zimbabwe
- Forex
- Crypto
