Hudson Rock spots first infostealer attack stealing OpenClaw AI assistant configuration files Stolen secrets (API keys, tokens) could grant access to linked apps like Telegram or calendars Researchers ...