Fake ChatGPT and Claude apps on GitHub spread Yoba malware
MALWAREChatGPTredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
Fake ChatGPT and Claude applications distributed through GitHub deliver Yoba malware. The loader uses signed executables, which may help the payload pass basic trust checks. The payload loads a cryptominer. Defenders should block or remove unofficial copies of these apps and check endpoints for Yoba and unexpected mining activity.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Only download ChatGPT and Claude apps from their official sources rather than GitHub.
- Check whether any fake ChatGPT or Claude app has been installed on your device and remove it.
- Look for signs of unexpected cryptomining activity, such as high CPU use, on systems that ran these apps.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
HackRead
Who and what is in it
Malware
Products