Executive Summary
Threat actors are disguising malware loaders and cryptocurrency miners as fake Claude and ChatGPT desktop applications distributed through GitHub projects. Organizations using AI applications should care because trusted-looking software and signed executables can facilitate malicious code execution.
What Happened
Threat actors are delivering malicious loaders and cryptocurrency miners under the guise of artificial intelligence (AI) desktop applications for Anthropic Claude and OpenAI ChatGPT as part of a campaign dubbed Yoba. The activity involves creating fake GitHub projects that claim to be desktop applications like GPT-5.6 Sol, GPT-6 Astra, and Claude Opus, only to deliver a malware family called
Affected Products
- Anthropic Claude
- OpenAI ChatGPT
- GPT-5.6 Sol
- GPT-6 Astra
- Claude Opus
Vulnerability / Attack Technique
Malware delivery through fake AI applications
Technical Mechanism
Threat actors created fake GitHub projects that claimed to provide desktop applications for Claude and ChatGPT. These projects delivered malicious loaders and cryptocurrency miners and reportedly abused signed executables.
AI Security Category
AI-assisted attack
Part of the AI-Assisted Attacks topic.
Relevant Frameworks
RealGround Analysis
This matters because teams may introduce compromise through unofficial AI desktop software, even when the software appears associated with well-known AI products. AI application inventories, software provenance checks, signed-binary validation, and red-team exercises can help identify this type of supply-chain and execution risk.
Recommended Controls
- Allow installation of AI desktop applications only from verified vendor sources and approved repositories.
- Maintain an inventory of AI applications and dependencies, including publisher, repository, signing certificate, and version.
- Verify code-signing certificates and signatures while detecting unexpected unsigned or newly signed executable behavior.
- Use endpoint controls to block unauthorized cryptocurrency-mining processes and suspicious loaders.
- Conduct AI-focused red-team testing of software acquisition, installation, and update workflows.
Related RealGround Service
AI CISO Advisory · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/10/fake-chatgpt-and-claude-apps-abuse.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-30.