China's MIIT NVDB Urges Users to Beware of Fake OpenClaw Sites Spreading Malware

Fake OpenClaw Downloads Spreading Remote Access Trojans, Warns NVDB

Attackers are capitalizing on OpenClaw's popularity. China's NVDB platform has detected fake download sites and installer files mimicking the tool—commonly known as "lobster"—to trick users into downloading malware.

Once run, the malicious installer quietly loads a remote access trojan onto the victim's device. That could lead to cyberattacks, system compromise, or data leaks.

openclaw.png

So far, the spoofed domains include ai-openclaw.com.cn and web-openclaw.com.cn. Malicious package names spotted include openclaw.zip, openclawAI7beAolenc.zip, openclaw.exe, and opealeAi_7beAole-x64.exe. Users are urged to download OpenClaw and its plugins only from trusted sources, avoid suspicious links, and stay alert.

Recommended reading: