TL;DR what: Researchers demonstrated OpenClaw AI agent executes hidden commands in...

Phishing simulation on an OpenClaw email agent with various configuration profiles showed that it was susceptible to tactics commonly used to compromise human users.

Varonis built an OpenClaw email agent and phished it. It handed over AWS credentials, database keys, and a CRM export for 247 customers without verifying who asked.