Netskope Threat Labs uncovered Hologram, a fake OpenClaw installer campaign that uses layered infrastructure, anti-sandboxing, and a six-binary Stealth Packer framework to steal credentials from hundreds of wallet and password-manager extensions. The campaign spans multiple waves and uses Hookdeck, Telegram, Azure DevOps, and compromised domains to hide its command-and-control and deliver evolving payloads such as clroxide, memexec, and Vidar. #OpenClaw #Hologram #StealthPacker #Hookdeck #clroxide #Vidar