Malicious OpenClaw skills trick AI agents and users into installing a new AMOS variant that steals extensive data at scale.

Threat actors exploited Cloudflare's free-tier infrastructure and legitimate Python environments to deploy the AsyncRAT remote access trojan, demonstrating advanced evasion techniques that abuse trusted cloud services for malicious operations.