Fake Moltbot AI Extension on VS Code Marketplace Distributes Malware

Cybersecurity researchers have identified a fake extension for Microsoft Visual Studio Code called ‘ClawdBot Agent – AI Coding Assistant’ that was published on January 27, 2026. This extension, created by a user named ‘clawdbot’, masquerades as a free AI coding assistant but actually installs malware on users’ systems. The malicious payload is executed automatically when the integrated development environment (IDE) is launched, allowing attackers to gain persistent remote access to compromised hosts.

The extension retrieves a configuration file from an external server, which facilitates the execution of a binary named ‘Code.exe’ that deploys a legitimate remote desktop program, ConnectWise ScreenConnect. This setup enables attackers to control compromised systems effectively. Additionally, the extension has a fallback mechanism that retrieves a DLL file from Dropbox to ensure the malware is delivered even if the primary command-and-control infrastructure is unavailable.

Security researcher Jamieson O’Reilly has highlighted the risks associated with the legitimate Moltbot instances, which expose sensitive configuration data, API keys, and conversation histories to unauthorized parties. The Clawdbot agents can impersonate users across various messaging platforms, allowing attackers to inject messages and exfiltrate sensitive data without the user’s knowledge.

Another analysis by Intruder noted widespread misconfigurations leading to credential exposure and vulnerabilities across multiple cloud providers. The core issue lies in the architectural design of Clawdbot, which prioritizes ease of deployment over secure configurations, leaving non-technical users vulnerable.

Implications for Users and Organizations

This incident underscores the importance of vigilance when installing third-party extensions, especially those that claim to be AI tools. Users should be cautious of extensions that do not originate from verified sources, as they may pose significant security risks.

Organizations using Moltbot or similar tools should conduct thorough audits of their configurations, revoke unnecessary service integrations, and monitor for signs of compromise. Implementing strict network controls and validating credentials can help mitigate risks associated with unauthorized access.

As the popularity of AI tools continues to grow, so does the potential for malicious actors to exploit them. Users must remain aware of the security implications of deploying such tools and ensure they follow best practices for cybersecurity.