Infostealers added Clawdbot to their target lists before most security teams knew it was running

Infostealers are exploiting Clawdbot's vulnerabilities, including lack of authentication and prompt injection. This allows attackers to gain shell access and steal sensitive data. Commodity infostealers like RedLine, Lumma, and Vidar have added Clawdbot to their target lists.