Fake ChatGPT, Claude apps spread malware via signed AI binaries
6 Articles
6 Articles
CSO Online
Fake ChatGPT, Claude apps spread malware via signed AI binaries
Attackers are distributing malware through fake ChatGPT and Claude desktop applications, using legitimate, digitally signed executables from OpenAI and Anthropic to load malicious code onto victims’ Windows systems, according to Check Point Research. The campaign, tracked as Yoba, uses fake GitHub repositories and websites promoting purported AI applications, including “GPT-5.6 Sol,” “GPT-6 Astra” and “Claude Opus.” “These projects look convinci…
The installation file bears the signature of OpenAI or Anthropic, but the archive downloaded from fake GitHub repositories also contains an trapped file. Hackers use it to mine cryptocurrency on your computer, without your knowledge.
Check Point Research, the Threat Intelligence division of Check Point® Software Technologies Ltd., a global company in cybersecurity solutions, has released an investigation into Yoba, a sophisticated malware campaign that supplants desktop software from popular artificial intelligence tools such as ChatGPT and Claude to infect computers from cybersecurity.The entry detects a campaign that uses legitimate ChatGPT and Claude binaries to infect AI…
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
