OpenClaw Developer Falls Victim to GitHub Phishing Attack Using Fake Airdrop to Steal Cryptocurrency Wallet Funds

robot
Abstract generation in progress

Deep Tide TechFlow News, March 19 — According to Decrypt, the security platform OX Security disclosed a phishing attack targeting OpenClaw developers. The attacker impersonated a GitHub account and used the offer of giving away $5,000 worth of $CLAW tokens as bait to lure developers to a fake openclaw.ai website. After connecting their wallets, the attackers stole funds. Malicious code was hidden in a highly obfuscated JavaScript file called “eleven.js” and transmitted wallet addresses, transaction amounts, and other data through a dedicated C2 server. The attacker is suspected of using GitHub star functionality to precisely target users. The related accounts were deleted within hours of going live, and no victims have been confirmed yet.

View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pin