Evidence · DiggingBeagle record
Trellix - OpenClaw supply-chain crisis / ClawHavoc
Evidence record
Claim-level citations (6)
- supportsClawHavoc weaponized OpenClaw skills to deliver wallet-stealing malware: The attack path combined malicious skill instructions with host-level command execution and malware delivery, exploiting the fact that agent frameworks can act directly on the operating system.
Scope and version limitations; malicious skills; wallet-stealer analysis
- supportsClawHavoc weaponized OpenClaw skills to deliver wallet-stealing malware: Trellix identified more than 350 malicious or typosquatted skills in the ClawHub/OpenClaw ecosystem.
Scope and version limitations; malicious skills; wallet-stealer analysis
- supportsClawHavoc weaponized OpenClaw skills to deliver wallet-stealing malware: Trellix identified more than 350 malicious or typosquatted OpenClaw skills in the ClawHavoc campaign.
Scope and version limitations; malicious skills; wallet-stealer analysis
- supportsClawHavoc weaponized OpenClaw skills to deliver wallet-stealing malware: Trellix stated that the specific OpenClaw issues it reproduced were principally from older releases and were not present in current versions at publication.
Scope and version limitations; malicious skills; wallet-stealer analysis
- supportsClawHavoc weaponized OpenClaw skills to deliver wallet-stealing malware: Trellix says the delivered stealer targeted more than 60 cryptocurrency wallets.
Scope and version limitations; malicious skills; wallet-stealer analysis
- supportsClawHavoc weaponized OpenClaw skills to deliver wallet-stealing malware: The stealer targeted more than 60 cryptocurrency wallets, including MetaMask, Phantom, Exodus and Electrum.
Scope and version limitations; malicious skills; wallet-stealer analysis