News
ai An updated Model Spec for more capable and beneficial AI - OpenAI - ChatGPT & AI Research cybersecurity Tracking AI adoption in North Korean threat actor tradecraft - Microsoft Security Blog cybersecurity Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions - The Hacker News cybersecurity Threat Modeling With 4 Simple Questions on a White Board - Dark Reading cybersecurity Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners - The Hacker News threat-intel Coruna iOS Exploit Kit Hidden Behind Malicious Ads Targets Crypto Seed Phrases, ADEX Reports - GBHackers cybersecurity Google Says Gemini 4 Carbon Leads in Finding, Exploiting and Fixing Vulnerabilities - SecurityWeek cybersecurity How Secure Are US Elections? Voting Machine Risks and the Growing Threat of AI - SecurityWeek cybersecurity Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless Steps - SecurityWeek cybersecurity CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks - BleepingComputer threat-intel AppViewX Expands Quantum Trust Hub with Cryptographic Discovery, Posture Management, and Remediation - GBHackers cybersecurity Adobe, Veeam, Juniper Networks Patch Critical Vulnerabilities - SecurityWeek cybersecurity Google's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching Vulnerabilities - The Hacker News threat-intel Cisco Talos Uncovers KeyDrift Malware Targeting SD-WAN Controllers to Steal Network Encryption Keys - GBHackers cybersecurity BAE Says No Data Extracted in Incident Hitting Bankruptcy Courts - SecurityWeek
1 / 15
All news ›
Cybersecurity

Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners

The Hacker News ·

Threat actors are delivering malicious loaders and cryptocurrency miners under the guise of artificial intelligence (AI) desktop applications for Anthropic Claude and OpenAI ChatGPT as part of a campaign dubbed Yoba. The activity involves creating fake GitHub projects that claim to be desktop applications like GPT-5.6 Sol, GPT-6 Astra, and Claude Opus, only to deliver a malware family called

Continue on The Hacker News ↗ ‹ All news Get the newsletter

The summary and image come from The Hacker News; the image is shown from their website.