Malware
cluw
- First Reported
- Jun 24, 2026
- Latest Reported
- Jun 24, 2026
Reported Context (1)
- command fetched a payload from hxxp[:]//2.26.75[.]16/Xuvewuyur. That payload was a macOS infostealer named cluw with a SHA256 hash of 818aea6143282b352fdfdc0f3ebf77a36e54eb3befb5cad1a355a99ab97c6aa7. Unit 42 Finds Malicious OpenClaw Skills Evading Scanners and Abusing AI Agents
Malware (1)
MITRE ATT&CK (6)
Vendors (2)
Products (5)
Tools (2)
Industries (1)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.