The phishing campaign lures OpenClaw developers with fake $5,000 token airdrops, then drains wallets through a cloned site ...
Attackers impersonate OpenClaw on GitHub, luring developers with bogus CLAW giveaways that trick users into connecting crypto wallets and exposing funds to malicious drains.
The flaw in a legacy Telnet implementation enables pre-auth remote code execution, exposing affected systems to full compromise.