Fake ChatGPT and Claude Downloads on GitHub Deliver Yoba Malware

Fake GitHub projects posing as ChatGPT and Claude desktop apps have been used to distribute Yoba malware, which abuses legitimate signed OpenAI and Anthropic executables to load malicious code. Check Point Research says the campaign’s observed payload was the XMRig cryptocurrency miner; its loader can also deliver other Windows executables or PowerShell scripts. Check Point Research