The Ministry of Industry and Information Technology's cybersecurity threat and vulnerability information sharing platform has detected malicious activities involving OpenClaw, a popular AI tool. According to PANews, attackers are exploiting OpenClaw's popularity by creating counterfeit websites and installation files to trick users into downloading malware-laden files. Once executed, these files discreetly load malicious programs onto devices, potentially leading to cyberattacks, system control, and data breaches.
The monitoring has identified fake domains such as ai-openclaw.com.cn and web-openclaw.com.cn, along with malicious installation packages named openclaw.zip, openclawAI7beAolenc.zip, openclaw.exe, and opealeAi_7beAole-x64.exe. Users are advised to download OpenClaw and its plugins from trusted sources and exercise caution when clicking on unfamiliar links to mitigate the risk of cyber threats.