Back Cybersecuritynews

Malicious OpenClaw Skills Used to Trick Users into Manual Password Entry for AMOS Infection

Cybersecuritynews •Tushar Subhra Dutta • February 24, 2026

Atomic macOS Stealer (AMOS), a well-known data-theft malware, has taken a sharp turn in how it reaches victims. Instead of hiding inside cracked software downloads as it once did, threat actors now embed it within malicious OpenClaw skills — small add-on packages that extend AI agent capabilities on platforms like OpenClaw. AMOS operates as a […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malicious OpenClaw Skills Facilitate AMOS Malware Infections Threat actors are now using malicious OpenClaw skills to distribute the Atomic macOS Stealer (AMOS) malware, shifting from previous methods that involved cracked software downloads. This new tactic tricks users into manually entering their passwords, thereby compromising their data. Users of AI platforms that support OpenClaw are particularly at risk. 2 sources 26

Extracted Entities

Malicious OpenClaw Skills Used to Trick Users into Manual Password Entry for AMOS Infection

The full story

Extracted Entities

Attack Types (1)

Malware (1)

MITRE ATT&CK (1)

Platforms (2)