Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://infosec.exchange/users/edwardk/statuses/116092713791959171">ekiledjian (edwardk@infosec.exchange)'s status on Thursday, 19-Feb-2026 02:51:10 JST</a><a href="https://infosec.exchange/@edwardk" title="edwardk@infosec.exchange"><img src="https://gnusocial.jp/avatar/109309-48-20230323201518.webp" width="48" height="48" alt="ekiledjian" style="position: absolute; left: 0; top: 0;">ekiledjian</a></section><article><p>The ClawHavoc campaign poisoned OpenClaw's official marketplace, ClawHub, by distributing 1,184 malicious Skills designed to steal data and enable backdoor access. This attack exploited the platform's permissive upload model, leading to potential system compromises through trojanized tools disguised as legitimate software.<br><a href="https://cybersecuritynews.com/clawhavoc-poisoned-openclaws-clawhub/" rel="nofollow">https://cybersecuritynews.com/clawhavoc-poisoned-openclaws-clawhub/</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/6166202#notice-12149713">In conversation</a><time datetime="2026-02-19T02:51:10+09:00" title="Thursday, 19-Feb-2026 02:51:10 JST">about 6 months ago</time> <span>from <span><a href="https://infosec.exchange/@edwardk/116092713791959171" rel="external" title="Sent from infosec.exchange via ActivityPub">infosec.exchange</a></span></span><a href="https://infosec.exchange/@edwardk/116092713791959171">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: blogger.googleusercontent.com</div><h5><a href="https://cybersecuritynews.com/clawhavoc-poisoned-openclaws-clawhub/">ClawHavoc Poisoned OpenClaw’s ClawHub with 1,184 Malicious Skills, Enabling Data Theft and Backdoor Access</a></h5><div> from <span>@The_Cyber_News</span></div></header><div>ClawHavoc is a large-scale supply chain attack that abused OpenClaw’s ClawHub to distribute 1,184 malicious Skills enabling data theft and backdoor access.</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
ekiledjian (edwardk@infosec.exchange)'s status on Thursday, 19-Feb-2026 02:51:10 JST ekiledjian
The ClawHavoc campaign poisoned OpenClaw's official marketplace, ClawHub, by distributing 1,184 malicious Skills designed to steal data and enable backdoor access. This attack exploited the platform's permissive upload model, leading to potential system compromises through trojanized tools disguised as legitimate software.
https://cybersecuritynews.com/clawhavoc-poisoned-openclaws-clawhub/
In conversationabout 6 months ago from infosec.exchangepermalink
Attachments
1. Domain not in remote thumbnail source whitelist: blogger.googleusercontent.com
  ClawHavoc Poisoned OpenClaw’s ClawHub with 1,184 Malicious Skills, Enabling Data Theft and Backdoor Access
  from @The_Cyber_News
  ClawHavoc is a large-scale supply chain attack that abused OpenClaw’s ClawHub to distribute 1,184 malicious Skills enabling data theft and backdoor access.

Public

Embed Notice

HTML Code

Corresponding Notice