Skip to content
securitytabs

Covered by 2 outlets — first reported by Help Net Security, Oct 29, 14:49 UTC

Yoba malware hides in fake desktop versions of ChatGPT and Claude

MentionsCheck PointGitHubOpenAIAnthropic

In brief

Yoba malware uses fake ChatGPT and Claude apps to sideload malware through signed installers and deploy a cryptocurrency miner. Check Point Research has spent two months tracking a campaign it calls Yoba, which uses the popularity of AI tools to spread a custom malware chain. The attackers build fake GitHub projects that pose as AI

From Security Affairs's coverage.

Continue reading

2 outlets, in the order they reported it.

  1. Help Net SecurityFirst report

    Yoba malware hides in fake desktop versions of ChatGPT and Claude

    Fake GitHub projects posing as desktop versions of ChatGPT and Claude have been used to spread a malware chain that ends with a cryptocurrency miner, Check Point has found.

    Read at Help Net Security Details

  2. Security Affairs

    Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries

    Yoba malware uses fake ChatGPT and Claude apps to sideload malware through signed installers and deploy a cryptocurrency miner.

    Read at Security Affairs Details