GoPlus: The Skill app, which once topped the ClawHub download charts, is actually a trojan program, and some users have already suffered asset losses.
Foresight News reported, according to GoPlus monitoring, the Skill "What Would Elon Do," which once topped the ClawHub download charts, is actually a trojan program. Attackers used bots to inflate numbers and manipulate rankings to push it to the top, luring a large number of users to install it.
After installation, this malicious Skill steals users' SSH keys, crypto wallet private keys, and browser cookies, and establishes a reverse shell to the attacker's server, resulting in actual asset losses for users. This incident exposes a serious new supply chain attack vector within the Skill ecosystem. GoPlus reminds users to stop running OpenClaw without proper protection.
Additionally, according to chiefofautism, a total of 1,184 malicious Skills have been found in the entire ClawHub marketplace, with a single attacker uploading 677 malicious packages alone.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
S-Energy Clarifies Solar Contract Value at KRW 11.04 Billion, Reflecting Its Share
Why Snap Needed an Iron Man Star Before Its $2,195 Glasses Go on Sale
Profit surges; amid concerns over U.S. surgical volume, JPMorgan maintains "Overweight" on Intuitive Surgical (ISRG.US) and raises target price to $475
Intuitive Surgical (ISRG.US), the global leader in surgical robots, released its Q3 2026 earnings report on October 20 (U.S. Eastern Time). On the same day, JPMorgan published a research report, maintaining an "Overweight" rating on the stock.
Allergy and autoimmune biotechnology company Lycia Therapeutics (LYCA.US) sets IPO price at $16-18 per share, plans to raise $250 million
Lycia Therapeutics announced the terms of its initial public offering (IPO) on Tuesday.
Crypto prices
More
