Tricks from the Past deployed via signed ChatGPT and Claude binaries
// AI summary
Attackers are using fake GitHub projects mimicking ChatGPT and Claude desktop applications to spread a custom malware chain named Yoba.
// from the source
Key Points Introduction Over the past two months, we have been tracking a campaign that abuses the popularity of AI tools such as ChatGPT and Claude to spread a custom malware chain we call Yoba. The attackers use fake GitHub projects that pretend to be AI desktop applications like GPT-5.6 Sol, GPT-6 Astra, and Claude […] The post Tricks from the Past deployed via signed ChatGPT and Claude binaries appeared first on Check Point Research .