360-backed OpenClaw Assistant installer package leaked SSL private key, Zhou Hongyi previously promised "will never leak passwords"

SmartContractAuditor · 2026-03-16T16:35:10+00:00

Security researchers claim that the AI assistant "360 Security Lobster" launched by 360 leaked SSL private keys, which could potentially be used by attackers to impersonate servers and intercept user data, raising security concerns.

SmartContractAuditor

2026-03-16 16:35:10

Abstract generation in progress

Odaily Planet Daily reports that security researcher Lukasz Olejnik posted on the X platform that the AI OpenClaw assistant launched by 360, “360 Security Lobster,” leaked the SSL private key in its installation package. The private key corresponds to the domain *.myclaw.360.cn and is valid until April 2027. Attackers can use this private key to impersonate 360 servers, intercept user traffic, or forge login pages. Previously, 360 founder Zhou Hongyi had promised when launching the product that “passwords will never be leaked.” Notably, 360 currently has 461 million users and an estimated company valuation of about $10 billion. This news has also been corroborated by some developers in the Chinese-speaking community.

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.

1 Likes