This threat involves the GachiLoader malware campaign exploiting AI agent skill formats, specifically fake OpenClaw skills, as a novel social engineering vector to distribute malicious Windows binaries. The campaign uses a fake GitHub infrastructure to host GachiLoader, which delivers the Rhadamanthys infostealer via fileless injection. Two delivery methods are used: Node.js Single Executable Applications and an Electron dropper. GachiLoader incorporates sophisticated evasion techniques including anti-virtual machine checks, sandbox detection, privilege escalation, and uses a Polygon blockchain smart contract for command and control resolution, enhancing its persistence and obfuscation capabilities. The skills themselves do not contain malicious code but trick users into executing malicious binaries. There is no CVE or patch information associated with this threat, and no known exploits in the wild have been documented.

The impact of this threat is the potential compromise of Windows systems through social engineering that leads to the execution of malicious binaries. Once executed, the Rhadamanthys infostealer can exfiltrate sensitive information. The malware’s use of fileless injection and advanced evasion techniques makes detection and mitigation more challenging. The use of blockchain-based C2 infrastructure increases the difficulty of disrupting the attacker’s control mechanisms. However, since the attack relies on user interaction to download and run binaries, the risk can be mitigated by user awareness and cautious behavior.

There is no official patch or fix available for this threat. Mitigation should focus on user education to recognize and avoid social engineering lures, especially those involving AI agent skills or fake repositories. Organizations should implement controls to restrict execution of untrusted binaries and monitor for suspicious Node.js and Electron application behaviors. Endpoint detection solutions capable of identifying fileless injection and privilege escalation attempts may help detect this threat. Since the malware uses blockchain-based C2, network monitoring for unusual blockchain-related traffic may provide additional detection opportunities. Patch status is not yet confirmed — check vendor advisories and threat intelligence sources for updates.