Case bing-ai-fake-openclaw-installerAI supply chainWorldwide
Bing AI search promotes fake OpenClaw installer repos pushing Atomic and Vidar stealers
Huntress found GitHub repos under an 'openclaw-installer' organization, built from copied Cloudflare moltworker code, that Bing's AI answers recommended; the Windows binary dropped Vidar and GhostSocks and the macOS script delivered Atomic Stealer.
MediumAttack on AIStatus: ContainedVerified case file
Open in the interactive mapCite this case
- Reported
- Mar 5, 2026
- Location
- Worldwide
- Target
- Users searching for OpenClaw downloads
- Severity
- Medium
- Triggered by
- Unknown
- Actor type
- Criminal
- Reported loss
- None reported
- CVE
- None
What happened
Huntress found GitHub repos under an 'openclaw-installer' organization, built from copied Cloudflare moltworker code, that Bing's AI answers recommended; the Windows binary dropped Vidar and GhostSocks and the macOS script delivered Atomic Stealer.
Impact: Victim count not disclosed; infections delivered Vidar infostealer, GhostSocks backconnect proxy and Atomic Stealer
Who triggered it
Actor: Unknown
Attribution: Unattributed; Huntress observed the campaign in February 2026 across multiple new GitHub accounts
Motive: Credential theft and proxy botnet enrolment
How it happened
Attack vector: Malicious GitHub repositories surfaced by Bing AI search; OpenClaw_x64.exe ran Rust loaders executing stealers in memory, macOS users pasted a Terminal command
Root cause: AI search summarisation trusting freshly created GitHub repositories as official download sources
Timeline
- Huntress identifies the campaign and quarantines payloads on a customer machine
- Huntress reports repositories to GitHub; BleepingComputer publishes the findings
Response
Repositories reported to GitHub; Microsoft Defender quarantined the files; users advised to bookmark the official github.com/openclaw/openclaw source
Current status: Contained
Sources (open in a new tab)
- BleepingComputer bleepingcomputer.com
- BleepingComputer OpenClaw tag bleepingcomputer.com
Cite this case
Bing AI search promotes fake OpenClaw installer repos pushing Atomic and Vidar stealers. AI Threat Watch, case bing-ai-fake-openclaw-installer, Mar 5, 2026. https://aithreat.io/cases/bing-ai-fake-openclaw-installer/
Permanent link: https://aithreat.io/cases/bing-ai-fake-openclaw-installer/