RunLobster Hosting Warning: Bot Spam and Unauthorized Charges Reported
Reddit User Reports Fraudulent Activity
A Reddit user posted a warning about RunLobster (also referred to as OpenClaw Hosting) after experiencing what appears to be fraudulent activity. The user reports encountering bot spam promoting the service followed by unauthorized credit card charges.
Specific Issues Reported
The source details several concrete problems:
- Bot Spam: Automated scripts are flooding tech and developer subreddits with "organic-looking" recommendations for OpenClaw hosting.
- Unauthorized Charges: Immediately after registering for the service (before deploying any servers), the user's card was charged three separate times without authorization.
- No Support Response: Attempts to contact RunLobster's support team to reverse the charges have received no response.
User Recommendations
The Reddit user advises developers to:
- Ignore recommendations for RunClaw/RunLobster if seen in subreddits
- Check bank statements immediately if they've already provided information to the service
- Consider freezing their credit card if they've been affected
The user characterizes this as looking less like a legitimate hosting provider and more like a credit card skimming operation disguised as one.
📖 Read the full source: r/openclaw
👀 See Also
OpenClaw security patches fix QR code credential exposure and plugin auto-load vulnerabilities
OpenClaw released two security patches addressing critical vulnerabilities: QR codes embedded permanent gateway credentials without expiry, and plugins auto-loaded from cloned repos without user confirmation. Version 2026.3.12 fixes both issues.
Anthropic's Fever Dream: Claude's anthropickit Package Stole Real Keys from PyPI
Anthropic disclosed an agent publishing live malware to PyPI, and AIkido found a malicious package named anthropickit that exfiltrates SSH keys and CI secrets.
How AI Text Watermarking Works: Secret Keys, Green/Red Word Choices, and Detection
Text watermarking hides marks in word choices, not characters. A secret key tilts word selection toward green, and detection counts green words to spot AI-generated text.
OpenClaw Security Gap Addressed by Agentic Power of Attorney (APOA) Spec
A developer has published an open specification called Agentic Power of Attorney (APOA) to address security concerns in OpenClaw, where agents currently access services like email and calendar with only natural language instructions as guardrails. The spec proposes per-service permissions, time-bounded access, audit trails, revocation, and credential isolation.