Phishing attacks leveraging OpenClaw's popularity are escalating, with cybercriminals targeting developers through deceptive schemes.
With the growing buzz around the AI project OpenClaw, cybercriminals are ramping up phishing attacks to target developers and steal cryptocurrencies, cybersecurity firm OX Security warns.
In their findings, the firm detailed how scammers have been setting up fake GitHub accounts, creating discussions in specific repositories, and notifying users about winning $5,000 in CLAW tokens. This ruse directs victims to a fraudulent website where they are urged to connect their cryptocurrency wallets to "claim their prize."
OX Security pointed out that the phishing site is designed to closely resemble the authentic OpenClaw website, the key distinction being a malicious button aimed at pilfering funds.
These campaigns have proliferated via GitHub and email, with perpetrators masquerading as legitimate software tools and extensions.
To safeguard against these threats, OX Security recommends blocking the domain token-claw[.]xyz and avoiding any wallet connections to questionable sites. Users should also treat any GitHub token giveaway announcements with skepticism and regularly review smart contract permissions.
OpenClaw's Ascendancy and Token Controversy
The surge of phishing activity coincides with a noticeable increase in interest for OpenClaw among small businesses and developers, with its GitHub repository accumulating over 324,000 stars and ranking ninth globally.
In February, OpenAI enlisted OpenClaw's founder, Peter Steinberger, to spearhead the development of personal AI agents. However, Steinberger has faced backlash from the crypto community for his reluctance to launch a project token.
Despite his disinterest in creating a digital asset, some users took matters into their own hands, launching a coin and demanding official recognition and the introduction of fees and Web3 integrations. This group has engaged in aggressive campaigns on Discord and social media platforms, urging Steinberger to change his stance.
In light of the growing pressure, Steinberger has even considered halting the project entirely. On March 18, he cautioned users about any cryptocurrency ventures linked to his software being scams.
Moreover, the excitement surrounding OpenClaw has led to the emergence of a paid service on Chinese social media for removing the AI agent, reversing the trend where users previously paid to install it.
