Know What's Happening in Cybersecurity

Infostealer Malware Found Stealing OpenClaw Secrets for First Time

Hudson Rock reported the first in‑the‑wild incident of an infostealer stealing OpenClaw configuration files. The malware, identified as a Vidar variant, exfiltrated files such as openclaw.json, device.json, and soul.md on February 13, 2026, revealing API tokens, private keys, and personal data. These secrets could allow attackers to impersonate devices, access cloud services, and fully compromise a victim’s digital identity. Researchers anticipate that as OpenClaw adoption grows, more information‑stealing malware will specifically target AI assistant frameworks.