Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners

Th­reat ac­tors are de­li­ve­ring ma­li­cious loa­ders and cry­pto­cu­rrency mi­ners under the guise of ar­ti­fi­cial in­te­lli­gen­ce (AI) desk­top ap­pli­ca­tions for Anth­ro­pic Clau­de and Ope­nAI ChatGPT as part of a cam­paign dub­bed Yoba. The ac­ti­vity in­vol­ves crea­ting fake GitHub pro­jects that claim to be desk­top ap­pli­ca­tions like GPT-5.6 Sol, GPT-6 Astra, and Clau­de Opus, only to de­li­ver a malwa­re fa­mily ca­lled…