Skip to page content

AEGLIX MIND

Intelligence for Africa and the Gulf

AEGLIX news · Global

Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners

The Hacker News · [email protected] (The Hacker News)

Published by the source: Thu, 29 Oct 2026 20:50:29 +0530

From The Hacker News

Threat actors are delivering malicious loaders and cryptocurrency miners under the guise of artificial intelligence (AI) desktop applications for Anthropic Claude and OpenAI ChatGPT as part of a campaign dubbed Yoba. The activity involves creating fake GitHub projects that claim to be desktop applications like GPT-5.6 Sol, GPT-6 Astra, and Claude Opus, only to deliver a malware family called

Publisher-provided RSS excerpt. This is not the full article or an independently verified AEGLIX assessment.

Read the full story at The Hacker News ↗ (opens in a new tab)

Explore the story

The complete reporting, updates, and supporting evidence remain with the original publisher. Check the publication date and source before acting on a headline.

These are research tools; no CVE, indicator, or campaign relationship is inferred from this article.

More from The Hacker News

← Back to security news