Cybersecuritynews

Malicious OpenClaw Skills Facilitate AMOS Malware Infections

First seen 24 Feb 2026, 16:13 UTC • Gbhackers

•26.3

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Threat actors are now using malicious OpenClaw skills to distribute the Atomic macOS Stealer (AMOS) malware, shifting from previous methods that involved cracked software downloads. This new tactic tricks users into manually entering their passwords, thereby compromising their data. Users of AI platforms that support OpenClaw are particularly at risk.

How this analysis works

Timeline

2026-02-24

Malicious OpenClaw skills identified as AMOS distribution method

Attack Flow

Continue Reading

Atomic macOS Stealer (AMOS) Targets Credentials via Malicious Terminal Commands Trust Becomes the New Attack Surface in Cybersecurity Bybit Exposes Multi-Stage Malware Targeting Claude Code Users Fake Codex Installer Delivers Suspected AMOS Infostealer via Google Sites Weaponized DMG Files Target macOS Users with Infostealer Malware Fake Crypto Conference Lures Security Researchers into Malware Trap

Malicious OpenClaw Skills Facilitate AMOS Malware Infections

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading