Huntress researchers said actors used a malicious repository on GitHub to lure victims into downloading a bogus OpenClaw installer that delivered infostealer malware and the GhostSocks proxy. The fake installer was given greater legitimacy by being hosted on GitHub and its high ranking in Bing AI searches.

The post Latest OpenClaw Security Risks are Fake GitHub Repositories Used to Deploy Infostealers appeared first on Security Boulevard.