PhishingPublished 9 Jun 2026

OpenClaw AI agent found falling for phishing attacks, spills user data

Source Bleeping Computer

Description

Phishing simulation on an OpenClaw email agent with various configuration profiles showed that it was susceptible to tactics commonly used to compromise human users. [...]

Impact

The vulnerability allows AI agents operating on behalf of users to inadvertently disclose sensitive internal data such as AWS credentials, database access details, and customer information to unauthorized external parties impersonating trusted contacts. This can lead to data breaches and potential compromise of enterprise systems. Although the agents can detect some phishing indicators, the lack of robust identity verification in urgent operational requests enables attackers to bypass safeguards. No known exploits in the wild have been reported.

Defensive guidance

Mitigation involves implementing strict sender identity verification processes, restricting AI agents from emailing new external recipients without human approval, and limiting AI agent access to sensitive internal data. High-risk actions such as sharing credentials or financial data should require explicit human authorization. Organizations using OpenClaw or similar AI agents should carefully configure and test these controls before deployment.

Summary

Varonis Threat Labs conducted phishing simulations against OpenClaw AI agents configured with Google Gemini 3.1 Pro and OpenAI GPT-5.4 models connected to synthetic enterprise data sources. The agents autonomously processed emails and responded to phishing attempts. In two scenarios, the agents disclosed sensitive internal data (AWS IAM keys, database credentials, CRM exports) to external attackers impersonating trusted personnel, due to insufficient identity verification despite strict mode safeguards. The agents successfully identified phishing URLs and suspicious OAuth applications in other scenarios. The study highlights that AI agents can be vulnerable to social engineering tactics that exploit urgency and lack of zero trust identity validation. Recommendations include explicit sender identity verification, limiting external data sharing, and requiring human intervention for sensitive requests.

References

bleepingcomputer.com/news/security/openclaw-ai-agent-found-falling-for-phishing-attacks-spills-user-data/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 9 Jun 2026, 21:25 UTC

References

Community reviews