AI Incident Database: Malicious OpenClaw Skills Reportedly Delivered AMOS Stealer and Exfiltrated Credentials via ClawHub
Bitdefender researchers reported abuse in OpenClaw's third-party 'skills' ecosystem. In a Feb. 2026 sample, about 17% of skills were reportedly assessed as malicious, with many seemingly cloned under slight name changes. Posing as utilities, some skills were reportedly found to run obfuscated commands, fetch remote payloads, and in some cases deliver AMOS Stealer on macOS. Other skills were reportedly observed searching for private keys or API tokens and exfiltrating them.
AI Incident Database · Incident 1368Operator lens (medium): inspect D1 (input boundary), D7 (tool permissions), D8 (provider fallback).
Event summary
Bitdefender researchers reported abuse in OpenClaw's third-party 'skills' ecosystem. In a Feb. 2026 sample, about 17% of skills were reportedly assessed as malicious, with many seemingly cloned under slight name changes. Posing as utilities, some skills were reportedly found to run obfuscated commands, fetch remote payloads, and in some cases deliver AMOS Stealer on macOS. Other skills were reportedly observed searching for private keys or API tokens and exfiltrating them.
Linked entities
- malicious-actors
organisation | 70%
- openclaw
organisation | 70%
- unknown-threat-actors-distributing-malicious-openclaw-skills
organisation | 70%
- unknown-threat-actors
organisation | 70%
- organizations-using-openclaw
organisation | 70%
- openclaw-users
organisation | 70%
- privacy
organisation | 70%
Related graph edges
| Edge | Type | Confidence |
|---|---|---|
| ent-aiid-malicious-actors to ent-psf-d1 | maps to | 60% |
| ent-aiid-malicious-actors to ent-psf-d1 | maps to | 60% |
| ent-aiid-malicious-actors to ent-psf-d1 | maps to | 60% |
| ent-aiid-malicious-actors to ent-psf-d7 | maps to | 60% |
| ent-aiid-malicious-actors to ent-psf-d7 | maps to | 60% |
| ent-aiid-malicious-actors to ent-psf-d7 | maps to | 60% |
| ent-aiid-malicious-actors to ent-psf-d8 | maps to | 60% |
| ent-aiid-malicious-actors to ent-psf-d8 | maps to | 60% |
| ent-aiid-malicious-actors to ent-psf-d8 | maps to | 60% |
| ent-aiid-openclaw to ent-psf-d1 | maps to | 60% |
| ent-aiid-openclaw to ent-psf-d1 | maps to | 60% |
| ent-aiid-openclaw to ent-psf-d1 | maps to | 60% |