Malicious OpenClaw Skills Reportedly Delivered AMOS Stealer and Exfiltrated Credentials via ClawHub
Date: 2026-02-01
Affected: Malicious Actors, Openclaw, Unknown Threat Actors, Unknown Threat Actors Distributing Malicious Openclaw Skills
Attack vector: data-exfiltration
Category: real-world
Severity: Critical

AI Incident Database (AIID) entry #1368: Malicious OpenClaw Skills Reportedly Delivered AMOS Stealer and Exfiltrated Credentials via ClawHub. Alleged deployer/developer: Malicious Actors, Openclaw, Unknown Threat Actors, Unknown Threat Actors Distributing Malicious Openclaw Skills. See the linked AIID entry for full narrative, sourcing, and classification.


Mitigations:

Architectural layers (MAESTRO):