All news
Fake ChatGPT and Claude desktop apps on GitHub carry malware: get AI tools only from the vendor
Check Point Research has analysed Yoba, a campaign it followed for about two months. Fake GitHub projects named after AI desktop apps such as "GPT-5.6 Sol", "GPT-6 Astra" and "Claude Opus" appear near the top of Google, and their ZIP downloads bundle an authentic, signed OpenAI or Claude Setup.exe with a malicious DLL it loads. The first malicious releases went up at the end of August 2026.