Hackers Distribute Malware Through Fake ChatGPT and Claude Desktop Applications
A new cybercrime campaign has been identified, distributing malware through deceptive desktop applications impersonating popular AI chatbots, ChatGPT and Claude. Attackers are leveraging fake GitHub repositories to spread these malicious installers, which reportedly abuse signed binaries of legitimate applications to appear credible. While some reports specify the deployment of "Yoba malware" or "crypto miners," other outlets broadly refer to the payload as general malware. This campaign has been widely reported by numerous cybersecurity news outlets, highlighting an active threat to users seeking AI tools. The consistent reporting across multiple security news outlets indicates an established and active threat.
8 articles from 8 outlets covered this story. Their coverage differs on 1 point. The underlying claim is sourced from a shipped.
What do all outlets agree on?
8 outlets covered “Hackers Distribute Malware Through Fake ChatGPT and Claude Desktop Applications”. All of them report the following:
- Hackers are distributing malware
- The malware is hidden in fake desktop applications
- The fake applications impersonate ChatGPT and Claude
- The distribution method involves GitHub
- The malicious installers abuse signed binaries/executables
Did outlets disagree about this?
Yes. Coverage of “Hackers Distribute Malware Through Fake ChatGPT and Claude Desktop Applications” differs on 1 point. Each account below is how a different outlet described the same event:
The specific type of malware deployed.
Which outlets covered this?
All 8 articles found on this story, grouped by the stance of the piece. Every link goes to the original publisher.