{"id":43780,"date":"2026-02-19T20:42:31","date_gmt":"2026-02-19T12:42:31","guid":{"rendered":"https:\/\/nuoya.nuoyayasuo.top\/index.php\/2026\/02\/19\/infostealer-found-stealing-openclaw-ai-identity-and-memory-files\/"},"modified":"2026-02-19T20:42:31","modified_gmt":"2026-02-19T12:42:31","slug":"infostealer-found-stealing-openclaw-ai-identity-and-memory-files","status":"publish","type":"post","link":"https:\/\/nuoya.nuoyayasuo.top\/index.php\/2026\/02\/19\/infostealer-found-stealing-openclaw-ai-identity-and-memory-files\/","title":{"rendered":"Infostealer Found Stealing OpenClaw AI Identity and Memory Files"},"content":{"rendered":"\n

In a discovery that marks a worrying shift in cybercrime, researchers at Hudson Rock have identified a live case where a virus successfully snatched the entire identity and memory of a victim\u2019s personal AI<\/a>. While we usually worry about our bank passwords or credit card numbers, it seems the personal AI assistants we use to manage our daily lives are now the prime targets.<\/p>\n

Researchers noted that this wasn’t even a targeted hit at first. The malware used a broad routine to sweep the computer for sensitive folders, striking gold by accident when it found a folder named .openclaw<\/code>.<\/p>\n

This directory belonged to an AI system called OpenClaw<\/a> (formerly known as ClawdBot<\/a>). Further investigation revealed that the virus captured the user’s entire digital life because, as we know it, these assistants store a massive amount of personal context to be helpful. Unfortunately, this is exactly what the hackers wanted.<\/p>\n

What was taken?<\/strong><\/h3>\n

The hackers managed to retrieve the victim’s redacted email address (ayou...gmail.com<\/code>) along with their specific workspace path. These details, though seemingly small, provide a direct map of where the victim stores their most sensitive digital work.<\/p>\n

The data stolen from the victim was incredibly detailed, as researchers found three vital files were taken. The first was openclaw.json<\/code>, which acts as the central nervous system. This file contained the victim\u2019s Gmail<\/a> address and a Gateway Token, which is a digital key that could allow a stranger to control the AI remotely.<\/p>\n

The second file stolen was device.json<\/code>, which is perhaps even more dangerous. This file contains the privateKeyPem that allows a hacker to sign messages as if they were the victim\u2019s own device, bypassing almost all safety checks.<\/p>\n

But the most unsettling part was the third file, named soul.md<\/code>. According to researchers, this file, along with others like MEMORY.md<\/code>, provides an attacker with a \u201cblueprint of the user\u2019s life.\u201d<\/p>\n

A Mirror of the Victim<\/strong><\/h3>\n

Hudson Rock used its own AI system, Enki, to assess the damage, and the results were shocking. Because the AI was instructed to be \u201cbold with internal actions\u201d like learning and organising, the stolen files likely held daily logs, private messages, and calendar events. An attacker with these files does not just get a password; they get a \u201cmirror of the victim\u2019s life\u201d and a set of keys to their local machine.<\/p>\n