Case yoba-fake-ai-apps-signed-binariesAI supply chainGlobal
Yoba malware spread via fake ChatGPT and Claude desktop apps on GitHub
Check Point Research reports a two-month campaign (Yoba) using fake GitHub projects posing as AI desktop apps (GPT-5.6 Sol, GPT-6 Astra, Claude Opus), placing malware beside legitimate signed OpenAI and Anthropic executables for DLL sideloading; the observed final payload was an XMRig cryptominer, though the loader can deliver any payload.
MediumAttack on AIStatus: OngoingVerified case file
Open in the interactive mapCite this case
- Reported
- Oct 27, 2026
- Location
- Global
- Target
- Users seeking ChatGPT and Claude desktop apps
- Severity
- Medium
- Verification
- Reported by credible press or researchers
- Triggered by
- Unknown (Check Point sees indicators suggesting Russian origin)
- Actor type
- Criminal
- Sector
- Individuals & consumers
- Reported loss
- None reported
- CVE
- None
What happened
Check Point Research reports a two-month campaign (Yoba) using fake GitHub projects posing as AI desktop apps (GPT-5.6 Sol, GPT-6 Astra, Claude Opus), placing malware beside legitimate signed OpenAI and Anthropic executables for DLL sideloading; the observed final payload was an XMRig cryptominer, though the loader can deliver any payload.
Impact: Victim count and losses are not stated in the summary.
Who triggered it
Actor: Unknown (Check Point sees indicators suggesting Russian origin)
Attribution: Not attributed in the summary; Check Point Research tracks the campaign and names the malware chain Yoba.
Motive: Unknown; malware distribution
How it happened
Attack vector: Fake GitHub projects posing as AI desktop apps (e.g. GPT-5.6 Sol) that abuse signed ChatGPT and Claude binaries to load the malware.
Root cause: Attackers exploit the popularity of AI tools and trust in signed legitimate binaries and GitHub project listings.
Timeline
- Reported by Check Point Research
Response
Check Point Research published an analysis of the campaign.
Current status: Ongoing
Research warnings this case matches
- Seen in real incidents AI systems themselves become targets · International AI Safety Report
- Seen in real incidents Privacy and security · MIT AI Risk Repository
Compared with published AI risk research from several institutes on the Research vs reality page.
Sources (open in a new tab)
- Check Point Research research.checkpoint.com
- Check Point Research research.checkpoint.com
- Security Affairs securityaffairs.com
Cite this case
Yoba malware spread via fake ChatGPT and Claude desktop apps on GitHub. AI Threat Watch, case yoba-fake-ai-apps-signed-binaries, Oct 27, 2026. https://aithreat.io/cases/yoba-fake-ai-apps-signed-binaries/
Permanent link: https://aithreat.io/cases/yoba-fake-ai-apps-signed-binaries/
Related cases
The same type of incident, most recent first.