Cybersecurity firm OX Security reported a phishing campaign targeting OpenClaw developers using fake "CLAW" token claims and a cloned website.