Reported by 2 outlets

Timeline

1. original reporting

   OpenClaw NovaStealer Attacks Target 60+ Crypto Wallets, SSH Keys and AWS Credentials

   cyberpress.org · 54d ago · August 20th, 2026

   OpenClaw deployments have become a target for threat actors using supply-chain poisoning, ClickFix social engineering, and indirect prompt injection. According to Trellix Advanced Research Center, attackers abused the ClawHub skill registry to distribute NovaStealer, an information-stealing malware variant designed to target cryptocurrency wallets, developer credentials, browser data, and AI-agent context. The campaign, tracked as ClawHavoc, reportedly affected more than 300 skills and platforms during early 2026. Attackers uploaded malicious packages that impersonated legitimate OpenClaw tools, including typosquatted names such as “clawhub-cli,” “clawhubb,” and “openclawcli.” Some packages were artificially promoted through manipulated download metrics. OpenClaw connects large language models to local systems, allowing agents to read files, run terminal commands, access messaging apps, and automate workflows. This level of access can become dangerous when an agent processes untrusted skills, documents, emails, or web content. NovaStealer Targets Crypto Wallets Malicious ClawHub skills reportedly included deceptive instructions in SKILL.md files. These instructions persuaded users to install a supposed “AuthTool” or manually execute Base64-encoded commands to resolve a fake configuration problem. On macOS and Linux, the encoded command downloaded a payload from the IP address 91.92.242.30. The payload was identified as NovaStealer v2, a universal Mach-O binary capable of runn

2. update from gbhackers.com

   Hackers Trick AI Agents Into Telling Users to Install the Malware Themselves

   gbhackers.com · 54d ago · August 20th, 2026

   A supply-chain campaign targeting OpenClaw has shown how threat actors can turn autonomous AI agents into persuasive malware-delivery intermediaries. Rather than relying only on exploit code, attackers poisoned the ClawHub skill registry with seemingly legitimate extensions whose instructions prompted users to install fake prerequisite tools or paste obfuscated commands into a terminal. The campaign, tracked […] The post Hackers Trick AI Agents Into Telling Users to Install the Malware Themselves appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .