Fake ChatGPT and Claude Apps on GitHub Spread XMRig Miner

Check Point warns of a campaign dubbed 'Yoba 2026' distributing fake ChatGPT and Claude desktop apps via SEO poisoning and malicious GitHub repos; technical analysis shows signed installers using side-loading to run XMRig miners with Tor-based exfiltration.

2026-10-28 ~ 2026-10-28 · 2 related posts

• Fake ChatGPT and Claude apps on GitHub push XMRig malware, Check Point warns — TechNadu · 2026-10-28
• Technical breakdown: Yoba 2026's DLL sideloading chain behind fake AI apps — TechNadu · 2026-10-28