Over 575 malicious OpenClaw skills delivered malware to Windows and macOS

Acronis Threat Research Unit documented more than 575 malicious OpenClaw skills that delivered malware to Windows and macOS systems, according to the company's Cyber Pulse 2026 report. In an investigation named BOSSAI, Acronis researchers found one operator connected more than 10 AI models to tools for reconnaissance, scanning and exploitation, assigning tasks and monitoring agent activity through WeChat and LINE. The report also describes attackers using stolen credentials to access linked services and tools that interfere with intrusion detection and system recovery.