OpenClaw's rise draws phishing campaign targeting developers' crypto wallets
Malicious cyber actors are exploiting the growing popularity of the open-source AI agent project OpenClaw with a phishing campaign to drain developers' crypto wallets, cybersecurity firm OX Security said.
In a report published Wednesday, OX said the threat actor created fake GitHub accounts, opened issue threads in attacker-controlled repositories, and tagged dozens of developers claiming they had been selected to receive $5,000 in "CLAW" tokens.
Attackers directed victims to a malicious site, tricking them into connecting their wallets to claim fraudulent rewards. According to OX, the webpage was an almost identical clone of OpenClaw's official website, but with one critical addition: a "Connect your wallet" button designed to initiate wallet theft.
OX said the campaign spread via GitHub repositories and email outreach to appear as legitimate extensions or tools tied to the OpenClaw ecosystem.
The full scale of the activity remains unclear. The Block has reached out to OX Security for further information.
Fraudulent outreach
The phishing campaign coincides with OpenClaw's growing adoption among developers and small businesses seeking to automate workflows. As of today, OpenClaw's GitHub page has gained over 324,000 stars, ranking ninth among all repositories globally.
Last month, OpenClaw creator Peter Steinberger joined OpenAI, adding to the project's visibility. Operating under an independent foundation, OpenClaw continues as an open-source initiative supported by OpenAI.
Steinberger recently warned users that any crypto-themed outreach invoking OpenClaw should be treated as fraudulent.
OX also suggested that users block the malicious domains token-claw[.]xyz and watery-compost[.]today, and treat any GitHub issue promoting token giveaways as suspicious.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
US PPI report to test Bitcoin, gold and Nasdaq as December rate hike looms
Nvidia falls to its lowest valuation in 14 years! "Super bull" Tom Lee calls for bottom fishing, retail investors are buying more as it drops, but Wall Street is divided
After the market opened on Thursday, retail investors went against the trend and bought up Nvidia, with net purchases reaching $111 million in just half an hour, setting a record for the same period. Investors such as Tom Lee have publicly supported the company, with institutions optimistic about strong order backlogs extending to 2028, robust revenue growth, and opportunities created by declining valuations. Meanwhile, institutions like Bernstein and Goldman Sachs have become more cautious about Nvidia's outlook, with concerns focusing on management succession and technological leadership following Jensen Huang's departure.
Jane Street boosts Fidelity Bitcoin ETF stake 8x in Q3, trims BlackRock IBIT
From SpaceX to Anthropic, the market has new strategies for dealing with tech giants' IPOs
The market's response strategies to major listings are currently centered around "index inclusion expectations": the new regulations allow mega IPOs to be included in the six major indices within 15 days, triggering concentrated buying by passive funds. Investors are positioning themselves in advance and using options to hedge and amplify buying power. However, Anthropic has a free float of only about 6%; shares available for sale by employees on the first day and privately placed shares with no lock-up period may create supply pressure. On the other hand, index arbitrageurs are facing a rare opportunity.
Crypto prices
More
