Fake ChatGPT and Claude apps spread YobaLoader malware via DLL sideloading
Check Point says a campaign called Yoba distributes fake ChatGPT and Claude desktop apps through GitHub, using legitimate signed executables to sideload YobaLoader and ultimately run an XMRig crypto miner.