Fetching from the wire…
Top 5 · 2026-02-17 · source-backed
Hudson Rock detected a Vidar infostealer variant exfiltrating OpenClaw configuration files — gateway auth tokens and device key pairs — enabling full agent impersonation. This is not theoretical: stolen credentials allow remote connection to exposed instances, client impersonation, and bypass of Safe Device verification. CTO Alon Gal called it "a significant milestone: the transition from stealing browser credentials to harvesting the 'souls' and identities of personal AI agents." What to do: Rotate your OpenClaw tokens now. Move sensitive configs out of default paths. Expect dedicated infostealer modules for agent platforms within months.
Each link below shares sources, entities, or timing with this story.
OpenClaw uses Claude Code / Shared entities / Same source / Shared topic
Linked by a graph relationship (OpenClaw uses Claude Code); both cover Agent Identity Theft Goes Live, Expect, OpenClaw, Safe Device; cite the same source (Vidar infostealer variant exfiltrating OpenClaw configuration files).
OpenClaw supports Discord / Shared entity: OpenClaw / Same source domain / Shared topic / What happened next
Linked by a graph relationship (OpenClaw supports Discord); both cover OpenClaw; reported by the same outlet (thehackernews.com).
Microsoft released OpenClaw / Shared entity: Rotate / Shared topic / What happened next
Linked by a graph relationship (Microsoft released OpenClaw); both cover Rotate; overlapping topics (agent, client, credential).
Microsoft released OpenClaw / Shared entity: OpenClaw / Shared topic / What happened next
Linked by a graph relationship (Microsoft released OpenClaw); both cover OpenClaw; overlapping topics (agent, credential, openclaw).
Anthropic deprecates OpenClaw / Shared entity: OpenClaw / Shared topic / What happened next
Linked by a graph relationship (Anthropic deprecates OpenClaw); both cover OpenClaw; overlapping topics (agent, token).
Linked by a graph relationship (Anthropic deprecates OpenClaw); both cover OpenClaw; overlapping topics (agent, config).
Anthropic deprecates OpenClaw / Shared entity: Expect / Shared topic / What happened next
Linked by a graph relationship (Anthropic deprecates OpenClaw); both cover Expect; overlapping topics (agent, config).
Anthropic deprecates OpenClaw / Shared entity: OpenClaw / Shared topic / What happened next
Linked by a graph relationship (Anthropic deprecates OpenClaw); both cover OpenClaw; overlapping topics (agent, token).