30 ClawHub skills secretly turn AI agents into a crypto swarm
2026-04-29T07:24:07Z•7f21ee100b1e1854be3b9e30903c9cf5bb46b52cb8912f2782a4e774189d93d3
ai-agentsbackdoorcryptominingdata-breachev-chargersfast16firestarteriot-securitymalwaremicrosoft-rdpransomware‑extortionshinyhunterssocial-engineeringsupply-chain-attackwiper
What happened
A collection of recent cybersecurity incidents and research highlighted by The Register: 30 malicious ClawHub skills covertly co-opt AI agents into a cryptomining swarm; a wave of supply‑chain compromises (Trivy, LiteLLM) tied to Vect, which appears to deploy a destructive wiper rather than recoverable ransomware; multiple large data‑exposure claims by ShinyHunters affecting Pitney Bowes, Carnival, ADT and others; an ongoing supply‑chain campaign impacting security/dev tools (Checkmarx/Lapsus$); CISA/UK incident response to a Firestarter backdoor discovered on a US federal network; discovery/披
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- theregister_security
- Record identifier
- 7f21ee100b1e1854be3b9e30903c9cf5bb46b52cb8912f2782a4e774189d93d3
- Enrichment time
- 2026-04-29T07:24:07Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.