Phishing for Lobsters: How We Tricked OpenClaw into Spilling Secrets
Varonis Threat Labs created an OpenClaw AI agent named Pinchy and tested it against classic phishing simulations. The agent forwarded AWS IAM keys, database passwords, and SSH credentials to an external attacker after re…