OpenClaw AI agent found falling for phishing attacks, spills user data
… In the first two scenarios, the strict mode failed despite the additional safeguards, due to the framework’s failure to validate the sender’s identity, “Both Generic and Strict profiles failed because the verification step still collapsed when the request appeared operationally urgent,” explained V… …