Fake ChatGPT and Claude apps spread malware via signed binaries
Original title: Fake ChatGPT, Claude apps spread malware via signed AI binaries
Check Point’s Yoba loader fetched XMRig and can also retrieve other Windows executables or PowerShell.
Check Point Research says fake GitHub repositories and sites for “GPT-5.6 Sol,” “GPT-6 Astra,” and “Claude Opus” deliver ZIP installers that pair genuine signed OpenAI or Anthropic Setup.exe files with a malicious winmm.dll. The YobaDropper library persists through a scheduled task and a second-stage YobaLoader. Observed payloads were XMRig miners routed through Tor; malicious releases were uploaded on August 30 and 31 and September 4. A June variant impersonated Cursor.
Unconfirmed: Check Point says indicators point to Russian origins but did not name a threat group.
- The dropper waits about 12 days unless launched by Setup.exe and skips several CIS keyboard layouts.
- It copies Windows Media Player into ProgramData and schedules execution as Local System three minutes after boot.
- The loader uses Telegram, Google DNS-over-HTTPS TXT records, and Catbox for an encrypted payload.
- The fake projects ranked in top Google results through SEO poisoning without inflated stars or forks.
Impact: Windows malware installation, including an XMRig cryptominer
- 1.Avoid AI installers from unverified GitHub repositories
- 2.Watch for signed apps loading unexpected DLLs and ProgramData scheduled tasks
- ATT&CK
- T1574.002 DLL Side-LoadingT1204.002 Malicious FileT1053.005 Scheduled TaskT1496 Resource HijackingT1071.004 DNS
- Organizations
- Check Point Research
From the original article
4 min read at csoonline.com
Attackers are distributing malware through fake ChatGPT and Claude desktop applications, using legitimate, digitally signed executables from OpenAI and Anthropic to load malicious code onto victims’ Windows systems, according to Check Point Research. The campaign, tracked as Yoba, uses fake GitHub repositories and websites promoting purported AI applications, including “GPT-5. 6 Sol,” “GPT-6 Astra” and “Claude Opus.”
csoonline.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.