Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners
// AI summary
Threat actors are using fake AI desktop applications for Anthropic Claude and OpenAI ChatGPT, such as GPT-5.6 Sol, to deploy malicious loaders and cryptocurrency miners in the Yoba campaign.
// from the source
Threat actors are delivering malicious loaders and cryptocurrency miners under the guise of artificial intelligence (AI) desktop applications for Anthropic Claude and OpenAI ChatGPT as part of a campaign dubbed Yoba. The activity involves creating fake GitHub projects that claim to be desktop applications like GPT-5.6 Sol, GPT-6 Astra, and Claude Opus, only to deliver a malware family called