OX Security: Hackers Exploit the Popularity of OpenClaw to Launch Phishing Attacks, Tricking Developers into Connecting Wallets to Steal Assets

DeepFlowTech · 2026-03-19T08:42:15+00:00

Cybersecurity firm OX Security has disclosed that malicious attackers are leveraging the reputation of the open-source AI project OpenClaw to launch phishing attacks targeting developers and steal cryptocurrency wallet assets. The attackers have forged GitHub accounts to lure victims to counterfeit websites and steal wallet information. The OpenClaw founder has issued a warning statement clarifying that the project will not conduct any related commercial promotions.

DeepFlowTech

2026-03-19 08:42:15

Abstract generation in progress

Deep Tide TechFlow News, March 19 — According to The Block, cybersecurity firm OX Security revealed that malicious actors are leveraging the popularity of the open-source AI project OpenClaw to target developers with phishing attacks aimed at stealing their cryptocurrency wallet assets.

According to the OX Security report, attackers created fake GitHub accounts, initiated issue discussions in repositories they control, and tagged numerous developers, claiming they had been selected to receive a $5,000 “CLAW” token reward. Victims were then directed to a counterfeit website that closely resembled the official OpenClaw site, which included an “Connect Wallet” button used to facilitate wallet theft. The attack was spread through GitHub repositories and email channels, disguised as plugins or tools related to the OpenClaw ecosystem.

OpenClaw founder Peter Steinberger posted on X this Wednesday, warning that any promotional messages related to cryptocurrency claiming to be associated with OpenClaw are scams. He emphasized that the project is non-commercial and does not conduct such activities.

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.