Fake OpenClaw Installer Targets Crypto Wallets and Password Managers

Gbhackers •Mayura Kathir • May 8, 2026

Hackers are abusing a fake OpenClaw installer to deploy a modular Rust-based infostealer framework dubbed Hologram, aimed at harvesting credentials from more than 250 crypto wallet and password manager browser extensions while hiding behind trusted cloud and messaging services. The site delivers an archive named OpenClaw_x64.7z containing a 130MB Rust-compiled executable, OpenClaw_x64.exe, padded with fake documentation […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fake OpenClaw Installer Targets Crypto Wallets and Password Managers A new malware campaign is exploiting a fake OpenClaw installer to deploy the Hologram infostealer framework, which is designed to harvest credentials from over 250 crypto wallet and password manager browser extensions. The malware, delivered as a 130MB Rust-compiled executable, is disguised with fake documentation to bypass antivirus detection mechanisms. Affected services include popular wallets like MetaMask and Phantom, as well as password managers like Bitwarden. The campaign utilizes trusted cloud and messaging services to distribute the malicious installer. Users are urged to remain vigilant and verify the authenticity of software downloads. The attack is ongoing, with no specific mitigation strategies provided yet. 3 sources 65

Extracted Entities

Fake OpenClaw Installer Targets Crypto Wallets and Password Managers

The full story

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (1)