Hackers Use Fake OpenClaw Installer to Spread Malware via Bing Search

OpenClaw is an AI agent gateway that connects with external tools and services. Chinese hackers have turned it into an attack hub that automatically scans assets, exploits vulnerabilities and verifies financial transactions. The campaign is significant because it focuses on Web3 and fintech services. Stolen AI and payment keys could lead to account takeovers, asset transfers and supply-chain risks.

Cybersecurity firms recently disclosed that the hackers exploited React vulnerabilities to breach targets and steal keys for AI and payment services. They then queried blockchain intelligence APIs to identify assets that could be monetized, creating an end-to-end automated workflow. OpenClaw backend logs have recorded more than 45,000 exploit attempts. As of July 20, 2026, no exact loss figure or list of affected institutions had been disclosed.

OpenClaw, created by Austrian engineer Peter Steinberger and released as open source in January 2026, can handle email, manage schedules and book flights. Its popularity has sparked a “raising lobsters” craze in China. The software requires access to files and environment variables and can call APIs. Those elevated system privileges also expose personal credentials, corporate data and industrial control systems to the risk of leaks or takeover.

China’s National Computer Network Emergency Response Technical Team/Coordination Center warned on March 10, 2026, that malicious instructions embedded in webpages could cause product keys to leak. Remote uninstallation services priced at 199 yuan (about NT$920) quickly appeared. On March 22, the center and the Cyber Security Association of China issued the first secure-use guidelines, calling for OpenClaw to be isolated on dedicated devices or virtual machines and denied administrator privileges. Financial institutions, government agencies and several colleges and universities have also successively restricted its use.