Fake AI desktop installers distribute Yoba malware through GitHub
Cybercriminals have distributed malicious software disguised as ChatGPT and Claude desktop applications, exploiting legitimate digitally signed installers to execute malware on Windows computers, cybersecurity company Check Point Research has disclosed. The operation, identified as Yoba, uses fraudulent GitHub repositories and accompanying websites advertising supposed applications named GPT-5.6…
We haven't written up this one. Arabian Post has the full story — the link below goes straight to it.