GoPlus: The Skill app, which once topped the ClawHub download charts, is actually a trojan program, and some users have already suffered asset losses.
Foresight News reported, according to GoPlus monitoring, the Skill "What Would Elon Do," which once topped the ClawHub download charts, is actually a trojan program. Attackers used bots to inflate numbers and manipulate rankings to push it to the top, luring a large number of users to install it.
After installation, this malicious Skill steals users' SSH keys, crypto wallet private keys, and browser cookies, and establishes a reverse shell to the attacker's server, resulting in actual asset losses for users. This incident exposes a serious new supply chain attack vector within the Skill ecosystem. GoPlus reminds users to stop running OpenClaw without proper protection.
Additionally, according to chiefofautism, a total of 1,184 malicious Skills have been found in the entire ClawHub marketplace, with a single attacker uploading 677 malicious packages alone.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Abeona Therapeutics Activates 8th ZEVASKYN Treatment Center in Florida
Aya Gold & Silver Reports High-Grade Drill Results from Zgounder Mine in Morocco
CoreWeave Signs 15-Year Lease for Capacity at Blockfusion Niagara Falls Data Center
British Pound: Data back Bank of England pause – Rabobank
