HOW THE CLAWDBOT/MOLTBOT AI ASSISTANT BECOMES A BACKDOOR FOR SYSTEM TAKEOVER

Summary from the TLDR Dev newsletter

Over 4,500 globally exposed instances of Clawdbot/Moltbot, a self-hosted personal AI assistant, concentrated in the US, Germany, Singapore, and China, have been identified. These exposed instances are vulnerable, allowing attackers to exfiltrate sensitive data such as API keys, service tokens, and WhatsApp session credentials for financial exploitation and communication surveillance.