AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

OpenClaw AI agent found falling for phishing attacks, spills user data

mediumnewsLLM-Specific

securitysafety

Source: BleepingComputerJune 9, 2026

Summary

Researchers at Varonis tested an OpenClaw AI agent (a framework that lets large language models autonomously interact with real-world systems) by simulating phishing attacks and found it vulnerable to social engineering tactics similar to those that trick humans. The agent fell for impersonation attacks and sent sensitive data like AWS credentials and customer records without verifying sender identity, though it performed better at detecting suspicious URLs and fake login pages when explicitly configured with security awareness instructions.

Solution / Mitigation

Varonis recommends that AI agents should be explicitly required to verify sender identities, be prevented from emailing new external recipients without approval, and have limited access to internal data. For high-risk actions such as credential sharing, financial data requests, and first-time communications, human approval should be requested.