Security researchers at Varonis built an OpenClaw email agent, connected it to a Gmail inbox with fake company data, and then phished it. The agent, dubbed Pinchy, handed over AWS credentials, database connection strings, and a customer export without verifying who was asking. It took a single ...
Source: [TNW](https://thenextweb.com/news/openclaw-ai-agent-phishing-varonis-pinchy)