Developers working with the fast-rising AI agent project OpenClaw are being targeted in a coordinated GitHub phishing campaign designed to steal crypto wallets, highlighting growing security risks around AI-driven developer ecosystems.
Fake GitHub Accounts Used to Lure Developers
According to cybersecurity researchers, attackers created fake GitHub accounts and repositories to target OpenClaw developers directly. These accounts would:
Tag developers in issue threads
Promote fake opportunities or rewards
Redirect users to malicious websites
In many cases, victims were told they had won up to $5,000 worth of “$CLAW” tokens, a tactic designed to create urgency and entice clicks.
Wallet Drain Attack Hidden Behind Fake Site
Once users clicked the links, they were sent to a cloned version of the official OpenClaw website, nearly identical in appearance.
The key difference:
A “Connect Wallet” button that triggered malicious scripts
Behind the scenes, attackers deployed obfuscated JavaScript and command-and-control infrastructure to extract wallet credentials and drain funds.
Targeting a Rapidly Growing AI Ecosystem
The campaign specifically targeted OpenClaw due to its explosive growth and popularity among developers, making it an attractive attack surface.
OpenClaw, an open-source AI agent platform, has gained significant traction in 2026 as developers use it to automate tasks, build tools, and integrate AI into workflows.
This rapid adoption has created a familiar pattern in crypto and AI:
New technology → rapid hype → attacker exploitation
Part of a Broader Trend in AI + Crypto Attacks
This phishing campaign is part of a larger wave of attacks targeting:
AI developer tools
Open-source ecosystems
Crypto wallet integrations
Security researchers warn that attackers are increasingly exploiting trusted platforms like GitHub to distribute scams, knowing developers are more likely to trust code hosted there.
Additionally, combining AI tools with crypto wallets creates a high-value target, since compromised systems can expose:
Private keys
API credentials
Sensitive development data
