
Fake ChatGPT and Claude apps spread malware via signed binaries
Check Point’s Yoba loader fetched XMRig and can also retrieve other Windows executables or PowerShell.
1
2 stories, newest first · one card per story

Check Point’s Yoba loader fetched XMRig and can also retrieve other Windows executables or PowerShell.

YobaLoader pulls its next stage from a Telegram profile picture and can run any executable or PowerShell script, not only XMRig.
Today 2K readers · 9.8K views · 7.7K reads · all time 156K views