Yoba Campaign Uses Fake ChatGPT and Claude Apps to Spread Crypto Miners
RedSide Security October 29, 2026 Cyber Attacks 18 views
Threat actors are publishing fake ChatGPT and Claude desktop apps on GitHub to distribute loaders and cryptocurrency miners, abusing signed executables to evade detection in a campaign tracked as Yoba.
social engineering
Yoba campaign
cryptominers
fake AI apps
signed executables
GitHub malware
malware loaders
Continue reading: Yoba Campaign Uses Fake ChatGPT and Claude Apps to…