THREATOPS
THREAT OPSThreat News › From Automation to Infection: How OpenClaw AI Agent Skills Are Being Weaponized

From Automation to Infection: How OpenClaw AI Agent Skills Are Being Weaponized

lowvirustotal_blogPublished 2026-02-02

<p>The fastest-growing personal AI agent ecosystem just became a new delivery channel for malware. Over the last few days, VirusTotal has detected hundreds of OpenClaw skills that are actively malicious. What started as an ecosystem for extending AI agents is rapidly becoming a new supply-chain attack surface, where attackers distribute droppers, backdoors, infostealers and remote access tools dis

MITRE ATT&CK techniques

Indicators of compromise

Original source: https://blog.virustotal.com/2026/02/from-automation-to-infection-how.html