unit42 · Crawled Jul 5, 2026

OpenClaw’s Skill Marketplace and the Emerging AI Supply Chain Threat

15 IoCs 1 Malware
Read original article ↗

AI Summary

OpenClaw's skill marketplace, ClawHub, has become a vector for AI supply chain attacks involving malicious skills that distribute infostealers, evade detection through file padding, and enable financial fraud via affiliate injection and front-running schemes. Multiple malicious skills were discovered between February and May 2026, leveraging paste-site redirects, C2 infrastructure, and dynamic payload delivery. These threats bypassed automated screening tools like VirusTotal and ClawScan, highlighting weaknesses in current detection mechanisms. Palo Alto Networks has collaborated with ClawHub and NVIDIA to improve skill verification and protect customers through advanced security services.

AI-extracted · verify before operational use

Extracted Entities 1 found

Indicators of Compromise 15 extracted

Type Value Detail
IP 2[.]26[.]75[.]16 Details →
IP 91[.]92[.]242[.]30 Details →
Domain download[.]setup-service[.]com Details →
GitHub Repo Ddoy233/openclawcli Details →
Domain glot[.]io Details →
Domain install[.]app-distribution[.]net Details →
Domain laosji[.]net Details →
Domain openclawcli[.]vercel[.]app Details →
Domain rentry[.]co Details →
SHA-256 818aea6143282b352fdfdc0f3ebf77a36e54eb3befb5cad1a355a99ab97c6aa7 Details →
SHA-256 881ce5cb124c4d2e814783724cc1388f6a1cbf6eee274c3f3366e77ba3503ad7 Details →
SHA-256 b30eaed1f7478c28f4ec50d07ed5ef014ffbc4b2bc5a38d689ba9f7abb5e19c2 Details →
SHA-256 b6c7e0bf573b1c7d9d3a05eb08d26579199515b847df984862805f44a7af8007 Details →
SHA-256 ebb73dbb5aac1f6fe1a88e8f26126a1e1aa34c9f3345ad4345189b40d9bf1d1d Details →
SHA-256 f4e41aa269c88bf11a2022701a9cf41e9a186aa1b224d837c31bf34e0b875d0e Details →

MITRE ATT&CK TTPs 36 techniques

T1003 OS Credential Dumping · Credential Access T1013 T1013 T1016 System Network Configuration Discovery · Discovery T1021.001 Remote Desktop Protocol · Lateral Movement T1027 Obfuscated Files or Information · Defense Evasion T1048 Exfiltration Over Alternative Protocol · Exfiltration T1055 Process Injection · Defense Evasion T1056.001 Keylogging · Collection T1056.002 GUI Input Capture · Collection T1059.001 PowerShell · Execution T1059.004 Unix Shell · Execution T1068 Exploitation for Privilege Escalation · Privilege Escalation T1069.001 Local Groups · Discovery T1070.004 File Deletion · Defense Evasion T1071 Application Layer Protocol · Command And Control T1071.001 Web Protocols · Command And Control T1071.004 DNS · Command And Control T1078 Valid Accounts · Defense Evasion T1078.001 Default Accounts · Defense Evasion T1078.004 Cloud Accounts · Defense Evasion T1082 System Information Discovery · Discovery T1083 File and Directory Discovery · Discovery T1086 T1086 T1090 Proxy · Command And Control T1105 Ingress Tool Transfer · Command And Control T1136.001 Local Account · Persistence T1204.002 Malicious File · Execution T1210 Exploitation of Remote Services · Lateral Movement T1218.011 Rundll32 · Defense Evasion T1485 Data Destruction · Impact T1497 Virtualization/Sandbox Evasion · Defense Evasion T1499.004 Application or System Exploitation · Impact T1543.001 Launch Agent · Persistence T1548.002 Bypass User Account Control · Privilege Escalation T1557 Adversary-in-the-Middle · Credential Access T1566 Phishing · Initial Access