Archive: https://archive.today/9bk3G
From the post:
>Unless you have been living under a rock, you’ve head of ClawdBot and its incredible rise to fame. ClawdBot is an open-source AI personal assistant that runs locally on your device and uses common chat messengers to manage all the things.
Executive Summary
14 malicious skills targeting Claude Code and Moltbot users were published to ClawHub and GitHub between January 27-29, 2026. The skills masquerade as cryptocurrency trading automation tools and deliver information-stealing malware to macOS and Windows systems. All five skills share the same command-and-control infrastructure (91.92.242.30) and use sophisticated social engineering to convince users to execute malicious commands which then steals crypto assets like exchange API keys, wallet private keys, SSH credentials, and browser passwords.
Archive: https://archive.today/9bk3G
From the post:
>>Unless you have been living under a rock, you’ve head of ClawdBot and its incredible rise to fame. ClawdBot is an open-source AI personal assistant that runs locally on your device and uses common chat messengers to manage all the things.
Executive Summary
14 malicious skills targeting Claude Code and Moltbot users were published to ClawHub and GitHub between January 27-29, 2026. The skills masquerade as cryptocurrency trading automation tools and deliver information-stealing malware to macOS and Windows systems. All five skills share the same command-and-control infrastructure (91.92.242.30) and use sophisticated social engineering to convince users to execute malicious commands which then steals crypto assets like exchange API keys, wallet private keys, SSH credentials, and browser passwords.
Login or register